oceanbase-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is to guide an AI agent through the execution of
obd(OceanBase Deployer) commands. These commands manage the full lifecycle of database clusters, including deployment, scaling, monitoring, and backups. This is consistent with the skill's stated purpose. - [COMMAND_EXECUTION]: The skill incorporates critical safety rules, explicitly requiring the agent to seek user confirmation before executing destructive commands such as
obd cluster destroyorobd cluster redeploy. - [EXTERNAL_DOWNLOADS]: The instructions provide links to
mirrors.oceanbase.comfor downloading theobdtool and mention that the tool may automatically download benchmark utilities (ob-sysbench, etc.) from official sources. These are legitimate vendor resources provided by the author of the skill. - [COMMAND_EXECUTION]: In the OCP CE takeover section (
cluster-management/references/ocp-ce.md), the skill documents the-pflag for password entry but includes a specific security warning advising users about the risks of command-line password exposure (visibility in process lists and shell history) and suggests safer alternatives.
Audit Metadata