seaweedfs
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for operating SeaweedFS, focusing on official documentation from the project's wiki and GitHub repository. It emphasizes security best practices, such as discouraging the use of unauthenticated 'mini' modes in production and enforcing strict access controls.
- [CREDENTIALS_UNSAFE]: The documentation correctly identifies that sensitive information like JWT keys, TLS certificates, and API secrets should be managed through environment variables or secure configuration files rather than being hardcoded. It provides placeholders (e.g., AWS_ACCESS_KEY_ID) for demonstration purposes only.
- [EXTERNAL_DOWNLOADS]: The skill references official resources from trusted sources, including GitHub (seaweedfs/seaweedfs) and Docker Hub (chrislusf/seaweedfs). These downloads are part of the legitimate software distribution and update cycle.
- [COMMAND_EXECUTION]: The skill documents the use of the 'weed' CLI tool for administrative tasks, benchmarks, and maintenance (e.g., 'weed shell', 'weed server'). These are standard operational commands for the described storage system.
- [PERSISTENCE]: The skill includes legitimate 'systemd' unit templates for managing SeaweedFS services across reboots, following standard Linux service management practices.
Audit Metadata