skills/mchien15/wrenai/devops/Gen Agent Trust Hub

devops

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility script scripts/cloudflare_deploy.py uses the Python subprocess module to execute the wrangler CLI for Worker deployments. This behavior is the primary intended function of the script and is implemented using standard practices.
  • [CREDENTIALS_UNSAFE]: The file .env.example contains multiple placeholders for API tokens and service account paths (e.g., CLOUDFLARE_API_TOKEN, GOOGLE_APPLICATION_CREDENTIALS). All entries use non-functional placeholder values, serving as a safe configuration template for users.
  • [EXTERNAL_DOWNLOADS]: The documentation in references/gcloud-platform.md includes setup instructions that download the Google Cloud CLI from official Google domains. These are well-known, trusted sources for infrastructure tooling.
  • [SAFE]: The scripts/docker_optimize.py script performs static analysis on local Dockerfiles. It specifically checks for security risks, such as containers running as the root user or the presence of hardcoded secrets, improving the security posture of the user's infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 05:48 AM
Security Audit — agent-trust-hub — devops