instance-storage-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [Best Practices for Local Storage]: The skill describes a robust pattern for managing isolated subdirectories per instance (e.g., ~/.my-tool/instances/{id}). This approach is consistent with standard filesystem-based session management.
  • [Atomic Operations]: The implementation patterns use tempfile.mkstemp and os.replace to ensure atomic file writes. This is a recommended practice to prevent data corruption during crashes or interruptions.
  • [Safe Concurrency]: The use of threading.Lock per instance via defaultdict provides isolation for concurrent operations on different data directories, avoiding global lock contention while maintaining data integrity.
  • [Standard Data Ingestion]: The patterns use standard Python libraries (json, pathlib, os) to manage local data. There are no patterns for remote code execution, external network calls, or sensitive data exfiltration.
  • [Environment Variable Configuration]: Allowing the data root to be overridden by an environment variable (MY_TOOL_DATA_DIR) is a standard practice for containerization and testing environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 04:27 AM
Security Audit — agent-trust-hub — instance-storage-patterns