truefoundry-integrate-gateway
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Bash and Python 3 to perform comprehensive codebase analysis and configuration verification tasks. It includes a specific routine to locate and execute its own API utility script (
tfy-api.sh) within local skill directories. - [DATA_EXFILTRATION]: To perform its integration tasks, the skill accesses the local TrueFoundry credentials file at
~/.truefoundry/credentials.jsonand reads project-specific.envfiles. It communicates with TrueFoundry's official API and Gateway endpoints (truefoundry.ai,truefoundry.com,truefoundry.cloud) to synchronize and verify model configurations. - [CREDENTIALS_UNSAFE]: The skill actively scans the repository's filesystem for hardcoded secrets, specifically looking for common API key patterns (e.g.,
sk-for OpenAI and Anthropic) to identify sensitive values that should be moved to the platform's secure secrets management service.
Audit Metadata