truefoundry-volumes

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with the official TrueFoundry API and utilizes vendor-managed container images from trusted registries such as AWS ECR and GitHub Container Registry.
  • [COMMAND_EXECUTION]: The helper script scripts/tfy-api.sh is used to facilitate API calls. It incorporates security measures such as validating that the API path starts with a forward slash and does not contain directory traversal patterns (..).
  • [CREDENTIALS_UNSAFE]: Secret management practices are strictly followed, with the skill advising the use of environment variables or TrueFoundry secret references (tfy-secret://) rather than hardcoding credentials in manifests or scripts.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to automatically install the truefoundry CLI from standard package registries. These operations are transparent and necessary for the intended functionality of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 03:58 PM