oceanbase-deploy

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's primary function is to guide an AI agent through the execution of obd (OceanBase Deployer) commands. These commands manage the full lifecycle of database clusters, including deployment, scaling, monitoring, and backups. This is consistent with the skill's stated purpose.
  • [COMMAND_EXECUTION]: The skill incorporates critical safety rules, explicitly requiring the agent to seek user confirmation before executing destructive commands such as obd cluster destroy or obd cluster redeploy.
  • [EXTERNAL_DOWNLOADS]: The instructions provide links to mirrors.oceanbase.com for downloading the obd tool and mention that the tool may automatically download benchmark utilities (ob-sysbench, etc.) from official sources. These are legitimate vendor resources provided by the author of the skill.
  • [COMMAND_EXECUTION]: In the OCP CE takeover section (cluster-management/references/ocp-ce.md), the skill documents the -p flag for password entry but includes a specific security warning advising users about the risks of command-line password exposure (visibility in process lists and shell history) and suggests safer alternatives.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 04:59 AM
Security Audit — agent-trust-hub — oceanbase-deploy