ssh-server
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Bash scripts (
tfy-api.sh,tfy-version.sh) and the TrueFoundry CLI to manage cloud deployments. The scripts include input validation to prevent path traversal and ensure API requests are routed correctly to the configured platform host. - [EXTERNAL_DOWNLOADS]: The skill downloads the official
truefoundryPython package and pulls container images from the vendor's verified Amazon ECR and JFrog repositories. It also provides instructions for installing standard utilities likeproxytunnelthrough trusted system package managers (apt, brew). - [CREDENTIALS_UNSAFE]: Platform authentication is handled via environment variables and
.envfiles. The documentation provides clear instructions on managing these secrets securely and warns against exposing API keys in terminal history. No hardcoded credentials or secrets were found in the skill files. - [SAFE]: All identified operations, including the modification of SSH authorized keys and the provisioning of cloud resources, are performed in direct service of the skill's stated purpose. The use of official vendor infrastructure and the inclusion of safety confirmation steps align with best practices for secure deployment automation.
Audit Metadata