fastly-fiddle
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed for developer testing and integration workflows.
- [COMMAND_EXECUTION]: The skill includes
scripts/run-fiddle.sh, which usescurlandjqto interact with the Fastly Fiddle API and process results. The script follows best practices, including input validation, error handling, and secure temporary file management. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://fiddle.fastly.dev. These requests are directed to the official Fastly Fiddle service, which is owned by the vendor of the skill. This communication is essential for the skill's primary function and is considered safe. - [DATA_EXPOSURE]: The skill provides explicit warnings to users that fiddles are public by default and advises against including secrets in VCL code, which aligns with security best practices for sandbox environments.
Audit Metadata