truefoundry-onboarding
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to assist with TrueFoundry account setup and configuration. All referenced domains (truefoundry.com, truefoundry.cloud) and packages (truefoundry) are owned by the vendor.
- [COMMAND_EXECUTION]: The skill uses local shell commands to install the vendor CLI (
pip install 'truefoundry==0.5.0') and perform API checks. These are standard for onboarding and setup tools. - [DATA_EXFILTRATION]: The skill manages
TFY_API_KEYandTFY_BASE_URLto facilitate platform interaction. Instructions specifically advise against committing secret files to version control, and credentials are only transmitted to the authorized vendor endpoints. - [EXTERNAL_DOWNLOADS]: Official vendor software is downloaded from PyPI and the TrueFoundry registration service. No untrusted or non-vendor sources are used.
Audit Metadata