datalens-yc-rls-resolve
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
yc(Yandex Cloud) CLI through a bundled Python script to perform lookups. It usessubprocess.runwith argument lists (rather than shell=True), which is the secure way to handle command execution and prevents shell injection. - [SAFE]: The Python script (
scripts/rls_tool.py) uses only the standard library and does not require external package installations via pip or npm. - [SAFE]: The skill includes a dedicated
auth-checkfunction that verifies authentication status by callingyc iam create-tokenwhile capturing the output internally. This ensures that the IAM token itself is never printed to the stdout, preventing accidental credential exposure in the agent's logs. - [EXTERNAL_DOWNLOADS]: The skill relies on the
ycCLI, which is a well-known official tool for Yandex Cloud. The use of this tool is consistent with the skill's stated purpose of managing DataLens configurations on that platform.
Audit Metadata