coreweave-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a diagnostic collection script that gathers cluster state, pod logs, and resource allocation data. This behavior is consistent with the stated purpose of creating a debug bundle for support tickets.
- [SAFE]: Network communication is limited to the official CoreWeave API (api.coreweave.com) for connectivity testing and rate-limit checks.
- [SAFE]: The script handles sensitive credentials securely by accessing the COREWEAVE_API_KEY from environment variables rather than using hardcoded values. It also includes logic to verify the key is set without logging the secret value itself.
- [SAFE]: Instructions included in the skill emphasize security best practices, such as redaction of secrets, use of restrictive file permissions, and local inspection of diagnostic archives before sharing.
Audit Metadata