nocobase-file-manager
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
nbCLI to manage NocoBase storage engines, file collections, and business relations. While this grants the agent command-line capabilities, the skill implements multiple safety gates, including mandatory validation of action-target pairs and required user confirmation before executing high-impact or destructive mutations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from NocoBase API responses and Swagger documentation to dynamically build its command context. This represents an inherent attack surface where malicious metadata stored in the NocoBase environment could attempt to influence the agent's behavior. However, the skill mitigates this by enforcing strict input contracts and requiring authoritative read-backs of state before and after every operation.
- [CREDENTIALS_SAFE]: The skill manages sensitive storage credentials for AWS S3, Aliyun OSS, and Tencent COS. It enforces a strict security policy requiring that all secrets be handled via environment variable placeholders (e.g.,
{{env.FILE_STORAGE_ACCESS_KEY}}) to prevent plaintext exposure in shell logs, configuration files, or the agent's output.
Audit Metadata