oci-functions-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill automates OCI Functions deployment by executing shell commands for OCI, Fn, and Docker. All mutating actions (installations, context updates, deployments, and network creation) are strictly gated through
scripts/confirm_gate.sh, which requires explicit user approval and utilizes a unique 128-bit nonce for each operation to prevent replay attacks. - [EXTERNAL_DOWNLOADS]: The skill downloads the Fn CLI binary from its official GitHub repository. Security is maintained by resolving the latest release metadata via the GitHub API and performing mandatory SHA-256 digest verification and version consistency checks before the binary is installed with elevated privileges.
- [CREDENTIALS_UNSAFE]: The skill manages OCI and Docker registry authentication. It probes local Docker configuration (
~/.docker/config.json) to verify existing sessions and prompts for credentials when necessary. Sensitive inputs like authentication tokens are handled via environment variables and standard input, following best practices to avoid exposure in command-line arguments. - [SAFE]: The implementation demonstrates high security maturity. It uses Python for robust JSON parsing of OCI data to prevent schema confusion, sanitizes directory names and display names to block injection, and maintains a strict machine-readable contract that rejects control characters in output.
Audit Metadata