postgresql-development-cloudbase
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves its stated purpose of providing documentation and implementation guidelines for CloudBase PostgreSQL development. It correctly identifies the technical differences between legacy NoSQL and new PostgreSQL-native environments.
- [SAFE]: Strong emphasis is placed on security best practices. The instructions explicitly warn against exposing sensitive
service_rolecredentials (API Keys) in client-side code and provide mandatory templates for implementing Row Level Security (RLS) and table-level GRANTS. - [SAFE]: All external resource references, including URLs for documentation, API endpoints, and console links, target official vendor-controlled domains (e.g.,
tcloudbasegateway.com,cloud.tencent.com,cloudbase.net). - [SAFE]: The skill utilizes official platform-provided tools and SDKs, specifically the
@cloudbase/js-sdkand designated MCP tools for database and environment management, without introducing untrusted third-party dependencies. - [SAFE]: Non-English content in the documentation (Chinese sections in
pgdoc.md) represents legitimate multi-language support for the author's platform and does not contain obfuscation or homoglyph attacks.
Audit Metadata