minimal-web-baas-demo
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a standard development workflow for creating minimal full-stack demos on Tencent CloudBase.
- [SAFE]: It explicitly instructs the agent to avoid fetching remote resources into the context, reinforcing a local-first security posture.
- [SAFE]: It mandates the use of anonymous authentication (signInAnonymously) before performing database operations to ensure sessions are properly managed and unauthorized access is prevented.
- [SAFE]: The skill limits the use of cloud functions to scenarios requiring server-side secrets or complex logic that database rules cannot handle, adhering to the principle of least privilege and minimizing the attack surface.
- [SAFE]: Referenced packages and tools like @cloudbase/js-sdk, tcb CLI, and standard package managers (npm, pnpm) are official vendor resources or industry-standard utilities.
Audit Metadata