minimal-web-baas-demo
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as an instructional guide for creating minimal Web + database demos using Tencent CloudBase's Backend-as-a-Service (BaaS) features. It does not contain malicious code, obfuscation, or persistence mechanisms.
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard development tools, including the vendor's command-line interface (
tcbCLI) and package managers (npm,pnpm), for environment setup and project management. These are legitimate operations within the context of a development-oriented skill. - [EXTERNAL_DOWNLOADS]: The instructions reference the installation of official vendor libraries (
@cloudbase/js-sdk) and the use of template downloading tools (downloadTemplate). These target the vendor's own infrastructure and ecosystems, posing no inherent security risk. The skill explicitly forbids fetching instructions from remote HTTP sources, which is a positive security constraint. - [DATA_EXPOSURE]: The skill mentions the use of publishable access keys for anonymous client-side authentication (
signInAnonymously). This is a standard architectural pattern for frontend-to-database communication on this platform and does not involve the exfiltration of sensitive server-side secrets or credentials.
Audit Metadata