tigris-sdk-guide

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to install the official Tigris CLI (@tigrisdata/cli) using npm install -g if the tool is not already available on the system. This is a standard initialization step for vendor tooling.
  • [EXTERNAL_DOWNLOADS]: The guide recommends the installation of several vendor-owned libraries, such as @tigrisdata/storage for TypeScript, github.com/tigrisdata/storage-go for Go, and tigris-boto3-ext for Python. These are official packages distributed through standard registries.
  • [CREDENTIALS_UNSAFE]: The documentation references environment variables for storage authentication (e.g., TIGRIS_STORAGE_SECRET_ACCESS_KEY). However, it consistently uses safe placeholders like tid_xxx and tsec_yyy instead of exposing actual secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:16 PM