r2-transfer-service-playbook
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a helper script
test_r2_worker.shdesigned to executepyteston specific project test files (tests/test_r2_transfer_service.pyandtests/email_processing/test_routing_rules_orchestrator.py). This is a standard and expected behavior for a playbook focused on service maintenance and validation. - [EXTERNAL_DOWNLOADS]: The documentation references integration with well-known services like Cloudflare Workers and Dropbox (
/scl/fo/endpoints). These references are consistent with the skill's primary purpose of managing a file transfer pipeline and do not involve untrusted sources. - [SAFE]: The skill follows security best practices by recommending the use of environment variables for secrets (e.g.,
R2_FETCH_TOKEN), enforcing domain allowlists (ALLOWED_REMOTE_FETCH_DOMAINS), and ensuring logs do not contain Personally Identifiable Information (PII).
Audit Metadata