truefoundry-platform
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a helper script (
scripts/tfy-api.sh) to perform authenticated REST API calls to the TrueFoundry platform usingcurl. The script includes security checks to prevent path traversal in API paths. - [COMMAND_EXECUTION]: The skill provides instructions for installing and managing the
truefoundryPython package and CLI tool usingpipanduvpackage managers. - [COMMAND_EXECUTION]: Local file access is performed to verify existing login credentials at
~/.truefoundry/credentials.json, which is the standard configuration path for the TrueFoundry CLI. - [SAFE]: The skill implements strict security policies for handling sensitive data, such as masking Personal Access Tokens (PATs) and requiring explicit user confirmation before displaying them. It also mandates Human-In-The-Loop (HITL) approval for destructive or resource-creating operations.
- [SAFE]: Network operations are restricted to the user-configured TrueFoundry base URL and are used exclusively for platform management functions.
Audit Metadata