cloud-functions
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code templates for CloudBase cloud function operations. All external references are directed toward official Tencent Cloud domains (cloudbase.net, tencent.com) and official SDKs (@cloudbase/js-sdk, @cloudbase/node-sdk).
- [SAFE]: Security best practices are consistently promoted. Code examples utilize placeholders for sensitive data (e.g., 'your-access-key', 'secret-key'), and the instructions explicitly caution against hardcoding secrets, advocating for the use of environment variables instead.
- [SAFE]: The skill describes a standard architectural pattern for serverless functions which involves processing external 'event' data. While this represents a surface for indirect prompt injection, it is the fundamental purpose of the functionality and is handled via standard developer instructions rather than malicious patterns. * Ingestion points: The 'event' parameter within 'exports.main' handlers in 'SKILL.md'. * Boundary markers: Not included in the basic code templates as they are dependent on specific implementation logic. * Capability inventory: Function lifecycle management and API execution capabilities provided via 'createFunction', 'updateFunctionConfig', and 'callCloudApi' tools. * Sanitization: The skill focuses on infrastructure management and deployment; data sanitization is a responsibility of the functional code implementation.
Audit Metadata