truefoundry-logs
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by a trusted vendor (TrueFoundry) and interacts exclusively with official platform infrastructure using authenticated API calls.
- [SAFE]: Credential management adheres to best practices by utilizing TrueFoundry's internal secret referencing system (tfy-secret://) and standard environment variables, effectively preventing the use of hardcoded secrets.
- [SAFE]: The skill includes explicit instructions for the AI agent to review logs for PII or sensitive tokens before displaying them, demonstrating a proactive approach to data exposure prevention.
- [SAFE]: External dependencies are limited to the official vendor CLI and SDK (truefoundry), which are installed with pinned versions to maintain supply chain security.
- [SAFE]: Utility scripts (tfy-api.sh) include built-in security checks to prevent path traversal and ensure that only authorized HTTP methods are used when interacting with the vendor's API.
Audit Metadata