mount-tidb-cloud-fs
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script for the
tiCLI from the official TiDB Cloud GitHub repository (github.com/tidbcloud/ti-cli). This is a standard installation method for the vendor's tool. - [PRIVILEGE_ESCALATION]: The skill uses
sudo(if available) to install thefuse3package on Linux systems. This is a necessary administrative step to enable the primary functionality of the skill, which is mounting a FUSE-based filesystem. - [COMMAND_EXECUTION]: The skill executes various system commands for directory management (
mkdir), package management (apt-get,dnf,yum,apk), and CLI operations (ti). These commands are used to set up the environment and perform the filesystem mount. - [DATA_EXPOSURE]: The skill uses the
TI_FS_TOKENenvironment variable for authentication. It includes explicit instructions for the agent never to print or log this token, which is a security best practice for handling sensitive credentials.
Audit Metadata