spice-cloud-management
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash helper script (scripts/spice-cloud.sh) that wraps curl commands to interact with the Spice.ai Management API. It handles various operations such as app creation, deployment triggering, and secret management by constructing and sending HTTP requests.
- [DATA_EXFILTRATION]: The skill manages sensitive data, including organization tokens (SPICE_API_TOKEN), application secrets, and API keys. All network operations are directed to the vendor's official domain (api.spice.ai), which is consistent with the skill's purpose for cloud resource management.
- [SAFE]: Instructions within the skill explicitly direct the AI agent to mask secret values and provide security warnings when displaying API keys to the user, adhering to security best practices for credential management.
Audit Metadata