yuque
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Authentication is managed via a local .env file for the YUQUE_TOKEN. This practice ensures that sensitive API tokens are not hardcoded or committed to version control, maintaining credential security.\n- [SAFE]: The skill incorporates a robust safety policy that gates destructive operations, such as deleting documents or repositories. These actions are default-deny and require the agent to generate a preflight plan for user confirmation before any request is sent.\n- [SAFE]: Network activity is restricted to the official and trusted Yuque API domain (https://www.yuque.com), minimizing the risk of unauthorized data exfiltration to unknown third parties.\n- [SAFE]: Operational workflows prioritize reading the current state of resources before making modifications. This 'read-before-write' approach ensures data integrity and prevents unintended consequences from stale information.
Audit Metadata