datalens-yc-rls-resolve

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the yc (Yandex Cloud) CLI through a bundled Python script to perform lookups. It uses subprocess.run with argument lists (rather than shell=True), which is the secure way to handle command execution and prevents shell injection.
  • [SAFE]: The Python script (scripts/rls_tool.py) uses only the standard library and does not require external package installations via pip or npm.
  • [SAFE]: The skill includes a dedicated auth-check function that verifies authentication status by calling yc iam create-token while capturing the output internally. This ensures that the IAM token itself is never printed to the stdout, preventing accidental credential exposure in the agent's logs.
  • [EXTERNAL_DOWNLOADS]: The skill relies on the yc CLI, which is a well-known official tool for Yandex Cloud. The use of this tool is consistent with the skill's stated purpose of managing DataLens configurations on that platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 11:39 PM