functions
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing the
zavuCLI tool through official channels, including a Homebrew tap (zavudev/tools/zavu) and the vendor's GitHub releases page. These are standard distribution methods for platform-specific tooling. - [COMMAND_EXECUTION]: Provides instructions for using the
zavuCLI to perform project management tasks, such aszavu login,zavu deploy, andzavu fn secrets. These operations are essential for interacting with the Zavu Cloud service. - [CREDENTIALS_UNSAFE]: Explains how to handle sensitive information like API keys and database connection strings using the platform's built-in secrets management. It also notes that authentication credentials are stored locally in
~/.zavu/credentials.jsonfollowing a successful login, which is standard behavior for cloud CLI tools. - [DATA_EXFILTRATION]: Includes code examples for tool handlers that use
fetchto communicate with external APIs. These examples demonstrate how to use environment secrets for authentication, representing typical integration patterns for serverless functions.
Audit Metadata