filebrowser
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses established and secure libraries (
httpx,boto3,tencentcloud-sdk-python-cdn) to perform its core functions of file management and data transfer. - [SAFE]: Path normalization logic is consistently applied in
scripts/filebrowser_transfer/filebrowser.pyandscripts/filebrowser_transfer/targets.pyto mitigate path traversal risks by rejecting '..' sequences and ensuring paths are properly formatted and absolute where required. - [SAFE]: Sensitive information such as API tokens and S3 credentials are managed securely through environment variables or local configuration files, avoiding hardcoded secrets. The implementation leverages Python's dataclass features (e.g.,
repr=False) to prevent secrets from being leaked in logs or output. - [SAFE]: The skill design includes protective checks, such as requiring explicit overwrite flags (
--overwriteor--override) for operations that would replace existing data, and validating destination paths to prevent accidental data loss. - [SAFE]: Analysis of the source code and instructions revealed no signs of prompt injection, obfuscation, unauthorized privilege escalation, persistence mechanisms, or suspicious remote code execution.
Audit Metadata