fastly-fiddle

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed for developer testing and integration workflows.
  • [COMMAND_EXECUTION]: The skill includes scripts/run-fiddle.sh, which uses curl and jq to interact with the Fastly Fiddle API and process results. The script follows best practices, including input validation, error handling, and secure temporary file management.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to https://fiddle.fastly.dev. These requests are directed to the official Fastly Fiddle service, which is owned by the vendor of the skill. This communication is essential for the skill's primary function and is considered safe.
  • [DATA_EXPOSURE]: The skill provides explicit warnings to users that fiddles are public by default and advises against including secrets in VCL code, which aligns with security best practices for sandbox environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 11:50 AM
Security Audit — agent-trust-hub — fastly-fiddle