cloud-functions
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to manage function lifecycles using the manageFunctions tool and the tcb CLI. These operations include creating, updating, and deploying application code to the CloudBase platform.- [EXTERNAL_DOWNLOADS]: The skill references its documentation and related development components hosted on cnb.cool. These resources belong to the vendor's own infrastructure and are used for skill discovery and documentation routing.- [PROMPT_INJECTION]: The skill outlines patterns for functions that process untrusted data from external triggers or HTTP requests. This establishes a surface for indirect prompt injection where external input might influence agent behavior if processed without validation.
- Ingestion points: The event parameter in handler functions (references/event-functions.md) and the request stream in HTTP functions (references/http-functions.md).
- Boundary markers: Absent in the provided code templates.
- Capability inventory: The agent has access to management tools like manageFunctions, managePermissions, and manageGateway for environment configuration.
- Sanitization: Provided examples demonstrate standard processing such as JSON.parse but do not include explicit input validation logic.
Audit Metadata