cloud-functions

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides robust security guidance for handling credentials, explicitly instructing the agent to never hardcode secrets, print them in logs, or return them in API responses. It mandates the use of environment variables and platform-managed keys (API keys or STS tokens) for SDK initialization.
  • [SAFE]: Deployment practices utilize standard vendor-specific mechanisms, such as scf_bootstrap and TCR (Tencent Container Registry), which are the official methods for the CloudBase platform. Permission changes like chmod +x are correctly scoped to the executable entry points within the deployment package.
  • [SAFE]: All external URLs and resources target official vendor-controlled domains (including cloudbase.net, tencentyun.com, and tencentcloudapi.com), and the skill correctly identifies these as the authoritative sources for platform operations.
  • [SAFE]: The skill implements a 'Change Safety Protocol' and 'Deployment Gate' to ensure that infrastructure changes are reviewed and follow established safety procedures.
  • [SAFE]: VPC and database access instructions are restricted to an 'exception-only' path for migrations, requiring valid infrastructure IDs and explicitly warning against the use of placeholders or guessed credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 05:34 PM
Security Audit — agent-trust-hub — cloud-functions