truefoundry-volumes
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with the official TrueFoundry API and utilizes vendor-managed container images from trusted registries such as AWS ECR and GitHub Container Registry.
- [COMMAND_EXECUTION]: The helper script
scripts/tfy-api.shis used to facilitate API calls. It incorporates security measures such as validating that the API path starts with a forward slash and does not contain directory traversal patterns (..). - [CREDENTIALS_UNSAFE]: Secret management practices are strictly followed, with the skill advising the use of environment variables or TrueFoundry secret references (
tfy-secret://) rather than hardcoding credentials in manifests or scripts. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to automatically install the
truefoundryCLI from standard package registries. These operations are transparent and necessary for the intended functionality of the skill.
Audit Metadata