r2-transfer-service-playbook

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a helper script test_r2_worker.sh designed to execute pytest on specific project test files (tests/test_r2_transfer_service.py and tests/email_processing/test_routing_rules_orchestrator.py). This is a standard and expected behavior for a playbook focused on service maintenance and validation.
  • [EXTERNAL_DOWNLOADS]: The documentation references integration with well-known services like Cloudflare Workers and Dropbox (/scl/fo/ endpoints). These references are consistent with the skill's primary purpose of managing a file transfer pipeline and do not involve untrusted sources.
  • [SAFE]: The skill follows security best practices by recommending the use of environment variables for secrets (e.g., R2_FETCH_TOKEN), enforcing domain allowlists (ALLOWED_REMOTE_FETCH_DOMAINS), and ensuring logs do not contain Personally Identifiable Information (PII).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 05:31 AM
Security Audit — agent-trust-hub — r2-transfer-service-playbook