skills/zrong/skills/filebrowser/Gen Agent Trust Hub

filebrowser

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses established and secure libraries (httpx, boto3, tencentcloud-sdk-python-cdn) to perform its core functions of file management and data transfer.
  • [SAFE]: Path normalization logic is consistently applied in scripts/filebrowser_transfer/filebrowser.py and scripts/filebrowser_transfer/targets.py to mitigate path traversal risks by rejecting '..' sequences and ensuring paths are properly formatted and absolute where required.
  • [SAFE]: Sensitive information such as API tokens and S3 credentials are managed securely through environment variables or local configuration files, avoiding hardcoded secrets. The implementation leverages Python's dataclass features (e.g., repr=False) to prevent secrets from being leaked in logs or output.
  • [SAFE]: The skill design includes protective checks, such as requiring explicit overwrite flags (--overwrite or --override) for operations that would replace existing data, and validating destination paths to prevent accidental data loss.
  • [SAFE]: Analysis of the source code and instructions revealed no signs of prompt injection, obfuscation, unauthorized privilege escalation, persistence mechanisms, or suspicious remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 09:06 PM
Security Audit — agent-trust-hub — filebrowser