cloud-create-project
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with the official Elastic Cloud API (api.elastic-cloud.com), which is the intended behavior for the project's purpose.
- [SAFE]: The
create-project.pyscript follows secure credential management practices by redacting passwords from stdout to prevent them from being captured in the AI agent's chat history or logs. - [SAFE]: The script uses
os.fchmodto enforce restricted file permissions (0o600) on the.elastic-credentialsfile, ensuring that sensitive information stored on disk is accessible only to the owner. - [SAFE]: Instructions in
SKILL.mdexplicitly forbid the agent from displaying secrets in chat or thinking traces, providing a defensive layer against accidental data exposure. - [SAFE]: The skill uses Python standard library modules only, avoiding risks associated with third-party or unverifiable dependencies.
Audit Metadata