truefoundry-prompts
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
tfyCLI andcurlvia a provided helper script (tfy-api.sh) to communicate with the TrueFoundry platform. This is the primary method for managing resources in the registry. - [EXTERNAL_DOWNLOADS]: The documentation suggests installing the
truefoundryPython package from the official PyPI registry to provide CLI functionality. - [DATA_EXFILTRATION]: The skill accesses
~/.truefoundry/credentials.jsonand uses theTFY_API_KEYenvironment variable to authenticate requests to the user's TrueFoundry tenant. This access is local and required for the skill to function as an authenticated client for the vendor's service. - [SAFE]: No malicious patterns such as obfuscation, unauthorized persistence, or privilege escalation were detected. The skill's behavior is consistent with its stated purpose of prompt management.
Audit Metadata