cloud-storage-web
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and guides the installation of the
@cloudbase/js-sdkNode.js package, which is the official library provided by the vendor (Tencent CloudBase) for web development. - [CREDENTIALS_UNSAFE]: The documentation provides instructions for managing publishable access keys. It correctly advises against hardcoding keys in source code, instead recommending the use of environment variables (
.env.local) and automated retrieval via authorized MCP tools (queryAppAuth). - [COMMAND_EXECUTION]: The skill includes instructions for the agent to execute SQL commands to configure Row Level Security (RLS) on database tables (
storage.objects). This is a security-enhancing practice that ensures fine-grained access control for cloud storage objects in PostgreSQL-based environments. - [INDIRECT_PROMPT_INJECTION]: The skill describes workflows for uploading and managing user-provided files. While this creates a data ingestion surface, the skill provides specific guidance on validating file types and sizes, as well as implementing robust error handling to manage untrusted content safely.
Audit Metadata