skills/zavudev/zavu-skills/functions/Gen Agent Trust Hub

functions

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends installing the zavu CLI tool through official channels, including a Homebrew tap (zavudev/tools/zavu) and the vendor's GitHub releases page. These are standard distribution methods for platform-specific tooling.
  • [COMMAND_EXECUTION]: Provides instructions for using the zavu CLI to perform project management tasks, such as zavu login, zavu deploy, and zavu fn secrets. These operations are essential for interacting with the Zavu Cloud service.
  • [CREDENTIALS_UNSAFE]: Explains how to handle sensitive information like API keys and database connection strings using the platform's built-in secrets management. It also notes that authentication credentials are stored locally in ~/.zavu/credentials.json following a successful login, which is standard behavior for cloud CLI tools.
  • [DATA_EXFILTRATION]: Includes code examples for tool handlers that use fetch to communicate with external APIs. These examples demonstrate how to use environment secrets for authentication, representing typical integration patterns for serverless functions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 04:22 PM
Security Audit — agent-trust-hub — functions