cloudbase-cli

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to execute tcb CLI commands for managing cloud environments, deploying functions, and performing database operations.
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation, configuration, and safety protocols from the author's official repository at cnb.cool, which is a verified vendor domain.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface. 1. Ingestion points: Reads function logs (tcb fn log), database records (tcb db execute), and storage files. 2. Boundary markers: Explicit instructions for environment confirmation and command verification using --help and --dry-run. 3. Capability inventory: High-privilege CLI access including resource deletion and code deployment. 4. Sanitization: Relies on agent-led safety protocols and human confirmation for destructive actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:46 AM
Security Audit — agent-trust-hub — cloudbase-cli