cos-vectors
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard administrative tool for Tencent Cloud COS services. It follows security best practices by utilizing official SDKs and avoiding any suspicious execution patterns.
- [CREDENTIALS_UNSAFE]: The skill appropriately manages sensitive API credentials (SecretId and SecretKey) by encouraging the use of environment variables or command-line arguments. It does not contain any hardcoded secrets.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
cos-python-sdk-v5, which is the official and trusted Tencent Cloud Python SDK. - [DATA_EXFILTRATION]: All network operations are directed towards legitimate Tencent Cloud service domains (
vectors.<Region>.coslake.com). - [PROMPT_INJECTION]: No evidence of instructions designed to bypass agent safety filters or override system prompts was found.
Audit Metadata