cloud-functions
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides robust security guidance for handling credentials, explicitly instructing the agent to never hardcode secrets, print them in logs, or return them in API responses. It mandates the use of environment variables and platform-managed keys (API keys or STS tokens) for SDK initialization.
- [SAFE]: Deployment practices utilize standard vendor-specific mechanisms, such as
scf_bootstrapand TCR (Tencent Container Registry), which are the official methods for the CloudBase platform. Permission changes likechmod +xare correctly scoped to the executable entry points within the deployment package. - [SAFE]: All external URLs and resources target official vendor-controlled domains (including cloudbase.net, tencentyun.com, and tencentcloudapi.com), and the skill correctly identifies these as the authoritative sources for platform operations.
- [SAFE]: The skill implements a 'Change Safety Protocol' and 'Deployment Gate' to ensure that infrastructure changes are reviewed and follow established safety procedures.
- [SAFE]: VPC and database access instructions are restricted to an 'exception-only' path for migrations, requiring valid infrastructure IDs and explicitly warning against the use of placeholders or guessed credentials.
Audit Metadata