object-storage
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides a command-line interface for interacting with S3-compatible object storage (AWS S3, Tencent COS, etc.) and Tencent Cloud CDN. No malicious patterns, obfuscation, or injection attempts were detected in the source code or instructions.
- [DATA_EXFILTRATION]: The skill is designed for data transfer to cloud storage (e.g., uploads). It includes explicit protections against accidental credential exposure; the CLI
doctorandlistcommands report only the authentication method (e.g., environment variables) rather than the actual secret keys, and the code suppresses credentials in exception contexts. - [COMMAND_EXECUTION]: The skill executes its internal Python logic via
uv run. It validates user-supplied object keys using a normalization function that explicitly rejects directory traversal attempts (e.g.,..sequences or absolute paths) to prevent unauthorized file access. - [EXTERNAL_DOWNLOADS]: The skill utilizes official and well-known libraries, including
boto3for S3 interactions andtencentcloud-sdk-python-cdnfor CDN management. These are trusted, industry-standard packages.
Audit Metadata