volcengine-vefaas

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install the veFaaS CLI via an NPM package hosted on a Volcengine-controlled domain (volces.com), which is the legitimate source for the vendor's tooling.
  • [COMMAND_EXECUTION]: The documentation describes various commands for the vefaas CLI, such as initialization, deployment, and configuration. These are standard operations for managing serverless functions.
  • [CREDENTIALS_UNSAFE]: While the skill discusses authentication via Access Keys and Secret Keys, it provides best-practice guidance for managing these credentials through environment variables and local secure storage rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 07:14 AM
Security Audit — agent-trust-hub — volcengine-vefaas