tigris-python-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the vendor's official CLI tool (
@tigrisdata/cli) via npm and the Python extension library (tigris-boto3-ext) via pip. These are standard installation procedures for the vendor's ecosystem. - [CREDENTIALS_UNSAFE]: The documentation references standard S3-compatible environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) and provides placeholders (e.g., tid_xxx, tsec_yyy). It correctly advises users to store these in a .env file and add it to .gitignore, which is a security best practice for secret management.
- [COMMAND_EXECUTION]: The skill includes CLI commands for bucket operations and authentication (tigris login, tigris buckets create). These are legitimate administrative tasks for interacting with the Tigris platform.
- [DATA_EXPOSURE]: The skill uses the vendor's storage endpoint (https://t3.storage.dev) for configuring the boto3 client, which is the expected behavior for the service described.
Audit Metadata