upload-r2
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses a sensitive environment file (
.env) located at/Users/jonathanburger/remotion/packages/remotion-media/.envto retrieveAWS_ACCESS_KEY_IDandAWS_SECRET_ACCESS_KEY. This data is then used to perform network uploads to a Cloudflare R2 bucket. - [COMMAND_EXECUTION]: The skill utilizes shell commands such as
git worktree,bun, andcurlto identify project paths, execute scripts, and verify remote asset availability. - [DYNAMIC_EXECUTION]: The skill executes a dynamically constructed JavaScript string using the
bun -ecommand. This script initializes an S3 client with credentials retrieved from the environment file to perform file uploads and status checks.
Audit Metadata