Habilidades cloudbase-agent

📦

cloudbase-agent

Name: cloudbase-agent
Author: tencentcloudbase

v2.23.8 Revisión del contenido r1 Riesgo alto 🌐 Acceso a red🔑 Variables de entorno⚙️ Comandos externos📁 Acceso al sistema de archivos⚡ Contiene scripts

Crear backends de agentes de IA con CloudBase

Los servicios de agentes necesitan patrones coherentes de servidor, adaptador, despliegue e interfaz de usuario. Esta skill guía proyectos de CloudBase Agent SDK en TypeScript y Python.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "cloudbase-agent" from https://skillstore.io/skills/tencentcloudbase-cloudbase-agent.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-cloudbase-agent/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/tencentcloudbase-cloudbase-agent.md Manifest firmado GET /api/skills/tencentcloudbase-cloudbase-agent/manifest Lockfile firmado GET /api/skills/tencentcloudbase-cloudbase-agent/lockfile

Pruébalo

Usando "cloudbase-agent". Crea un agente LangGraph en TypeScript y despliégalo en CloudBase.

Resultado esperado:

Selección de adaptador con los paquetes CloudBase requeridos.
Esquema de configuración del servidor para endpoints AG-UI y compatibles con OpenAI.
Lista de comprobación de despliegue usando los requisitos de runtime de CloudBase Agent.

Usando "cloudbase-agent". Agrega autenticación y observabilidad a un servidor de agente Python.

Resultado esperado:

Plan de middleware para un contexto de usuario validado.
Lista de variables de entorno para proveedores de modelo y tracing.
Comprobaciones de producción para CORS, secretos y exposición de endpoints.

Usando "cloudbase-agent". Conecta un cliente web a mi servicio de agente.

Resultado esperado:

La skill identifica la ruta del cliente AG-UI, la forma del endpoint, el comportamiento de streaming y las consideraciones de despliegue.

Auditoría de seguridad

Riesgo alto

v2 • 9/7/2026 Abrir el informe versionado

Most static hits are documentation examples or markdown syntax, including placeholder secrets, local URLs, dotenv usage, and inline code. Confirmed risks remain in authentication examples, unverified JWT decoding, public interface binds, shell-based deployment steps, and wildcard CORS guidance.

Archivos escaneados

5,743

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (10)

Alto

py/adapter-coze.md:221

System reconnaissance

logger.warning("Missing or invalid Authorization header")

The middleware logs a missing or invalid Authorization header and then continues as an anonymous user. That behavior can bypass authentication for protected agent actions.

Alto

py/authentication.md:79

System reconnaissance

# Handle invalid token (log but don't block in this example)

The basic JWT example explicitly handles an invalid token by logging rather than blocking. The request then continues to the agent, which is an authentication bypass if reused.

Alto

py/authentication.md:80

System reconnaissance

print(f"Invalid JWT token: {e}")

The invalid token branch only prints the error in the basic middleware example. Because execution continues afterward, this is a real unsafe pattern.

Alto

py/authentication.md:82

System reconnaissance

# raise InvalidRequestError(message="Invalid authentication token")

The blocking exception is commented out in the basic authentication example. That makes the shown code continue after invalid authentication.

Alto

ts/adapter-langchain.md:58

Base64 decode

const payload = JSON.parse(atob(token.split(".")[1]));

The code decodes a JWT payload with atob and uses the sub claim for tenant isolation without signature verification. This can let a caller spoof user identity.

Alto

ts/adapter-langgraph.md:64

Base64 decode

const payload = JSON.parse(atob(token.split(".")[1]));

The code decodes a JWT payload with atob and uses the sub claim for tenant isolation without signature verification. This can let a caller spoof user identity.

Alto

py/adapter-coze.md:213-228

Authentication Fallback Allows Anonymous Requests

The Coze middleware uses a dev-secret fallback and continues requests as user anonymous when the Authorization header is missing or invalid. This can turn a protected agent endpoint into an unauthenticated endpoint if copied into production.

The cited example directly sets a predictable JWT secret fallback and yields after assigning an anonymous user on missing authentication.

Alto

py/authentication.md:78-84

Invalid JWT Example Continues Execution

The basic authentication middleware logs InvalidTokenError and then yields to the agent instead of blocking the request. Later secure guidance exists, but this initial example is unsafe if reused.

The code catches InvalidTokenError, prints the error, leaves the blocking exception commented out, and reaches the yield statement.

Mostrar los 10 problemas confirmados

Alto

ts/adapter-langchain.md:56-64 ts/adapter-langgraph.md:62-69

Unverified JWT Payload Used for Tenant Isolation

TypeScript adapter examples parse the JWT body with atob and use payload.sub for CloudBaseSaver userId. The signature is not verified before using that value for tenant isolation.

Both examples decode the JWT payload client-side and trust sub for storage isolation without a verification step.

Medio

py/skill.md:106-111 py/adapter-coze.md:272-282 py/agent-deployment.md:340-356 ts/server-quickstart.md:78-83

Wildcard CORS in Agent Server Examples

TypeScript and Python examples enable broad CORS on agent endpoints, including FastAPI credentialed CORS. Public agent APIs should use explicit origin allowlists in production.

The cited snippets enable wildcard or broadly enabled CORS for agent servers, and one FastAPI example also enables credentials.

Elementos de revisión de capacidades (18)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

py/adapter-coze.md:213

Python getenv function

JWT_SECRET = os.getenv("JWT_SECRET_KEY", "dev-secret")

The example falls back to JWT_SECRET_KEY="dev-secret", which can create forgeable JWTs if copied into production. This is a real authentication weakness, not just configuration access.

Alto

py/adapter-coze.md:213

getenv function call

JWT_SECRET = os.getenv("JWT_SECRET_KEY", "dev-secret")

The getenv call supplies a hardcoded dev-secret fallback for JWT signing. A missing environment variable would silently weaken authentication.

Alto

py/adapter-coze.md:213

Generic API/secret keys

JWT_SECRET = os.getenv("JWT_SECRET_KEY", "dev-secret")

JWT_SECRET falls back to a predictable value named dev-secret. This creates a credible credential weakness when reused beyond local development.

Medio

py/adapter-coze.md:282

Hardcoded IP address

host="0.0.0.0"

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

py/agent-deployment.md:92

Shell command substitution

PROJECT_DIR="$(pwd)"

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

py/agent-deployment.md:104

Shell command substitution

echo "✅ Using: $PYTHON_BIN ($($PYTHON_BIN --version 2>&1))"

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

py/agent-deployment.md:89

Unix shell invocation

#!/bin/bash

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

py/agent-deployment.md:322

Unix shell invocation

#!/bin/bash

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

py/agent-deployment.md:377

Unix shell invocation

#!/bin/bash

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

py/agent-deployment.md:314

Hardcoded IP address

AgentServiceApp().run(create_agent, port=port, host="0.0.0.0")

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

py/references/recipes.md:32

Hardcoded IP address

server.run(host="0.0.0.0", port=9000)

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

py/references/server.md:36

Hardcoded IP address

uvicorn.run(fastapi_app, host="0.0.0.0", port=9000)

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

py/server-quickstart.md:277

Hardcoded IP address

uvicorn.run(app, host="0.0.0.0", port=9000)

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

py/server-quickstart.md:447

Hardcoded IP address

--bind 0.0.0.0:9000

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

py/skill.md:111

Hardcoded IP address

app.run(create_agent, port=port, host="0.0.0.0")

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medio

ts/agent-deployment.md:74

Unix shell invocation

#!/bin/sh

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

ts/agent-deployment.md:84

Unix shell invocation

> **NOTE**: Use `#!/bin/sh` (not `#!/bin/bash`) for maximum compatibility. The entry point should ma

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medio

ts/agent-deployment.md:137

Unix shell invocation

| **Startup script** | `scf_bootstrap` — `#!/bin/sh` + `node src/index.js` |

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Factores de riesgo

🌐 Acceso a red (37)

py/adapter-coze.md:58 py/adapter-coze.md:125 py/adapter-coze.md:136 py/adapter-coze.md:282 py/adapter-langgraph.md:235 py/adapter-langgraph.md:295 py/agent-deployment.md:314 py/authentication.md:431 py/authentication.md:456 py/authentication.md:468 py/references/observability.md:312 py/references/observability.md:360 py/references/observability.md:364 py/references/observability.md:134 py/references/observability.md:233 py/references/observability.md:301 py/references/observability.md:328 py/references/recipes.md:300 py/references/recipes.md:32 py/references/server.md:36 py/references/tools.md:55 py/references/tools.md:87 py/server-quickstart.md:291 py/server-quickstart.md:304 py/server-quickstart.md:321 py/server-quickstart.md:338 py/server-quickstart.md:397 py/server-quickstart.md:430 py/server-quickstart.md:277 py/server-quickstart.md:447 py/skill.md:111 SKILL.md:14 SKILL.md:15 ts/server-quickstart.md:82 ts/server-quickstart.md:128 ts/server-quickstart.md:138 ts/ui-clients.md:16

🔑 Variables de entorno (50)

⚙️ Comandos externos (50)

py/agent-deployment.md:92 py/agent-deployment.md:104 py/agent-deployment.md:89 py/agent-deployment.md:322 py/agent-deployment.md:377 py/skill.md:26 py/skill.md:27 py/skill.md:28 py/skill.md:29 py/skill.md:46 py/skill.md:60 py/skill.md:61 py/skill.md:62 py/skill.md:63 py/skill.md:78-87 py/skill.md:87-91 py/skill.md:91-112 py/skill.md:112-122 py/skill.md:122-142 py/skill.md:142-146 py/skill.md:146 py/skill.md:148-161 py/skill.md:161-163 py/skill.md:163-164 py/skill.md:164-169 py/skill.md:169-179 py/skill.md:179-181 py/skill.md:181-182 py/skill.md:182-183 py/skill.md:183-184 py/skill.md:184-188 py/skill.md:188-213 py/skill.md:213-217 py/skill.md:217-227 py/skill.md:227-233 py/skill.md:233-234 py/skill.md:234 py/skill.md:235 py/skill.md:236 py/skill.md:237-242 py/skill.md:242-243 py/skill.md:243-244 py/skill.md:244 py/skill.md:245-246 SKILL.md:12 SKILL.md:14 SKILL.md:15 SKILL.md:17 ts/agent-deployment.md:74 ts/agent-deployment.md:84

📁 Acceso al sistema de archivos (4)

py/agent-deployment.md:46 py/agent-deployment.md:96 py/agent-deployment.md:215 py/agent-deployment.md:215

⚡ Contiene scripts (5)

py/references/observability.md:56-61 py/references/recipes.md:240 py/references/recipes.md:246 py/server-quickstart.md:17-22 py/server-quickstart.md:171-179

Patrones detectados

System reconnaissance×4

Auditado por: codex Ver historial de auditorías →

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-agent/security.svg)](https://skillstore.io/skills/tencentcloudbase-cloudbase-agent?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/tencentcloudbase-cloudbase-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-cloudbase-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

tencentcloudbase. (2026). cloudbase-agent security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2

Cita BibTeX

@techreport{tencentcloudbase-tencentcloudbase-cloudbase-agent-2026,
  author = {tencentcloudbase},
  title = {cloudbase-agent security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudbase-agent security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-cloudbase-agent:audit:2"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Lanzar una API de agente

Crea un servidor de CloudBase Agent con streaming AG-UI y despliégalo con el runtime recomendado.

Conectar una interfaz de agente

Crea un cliente web o Mini Program que transmita eventos desde endpoints de CloudBase Agent.

Preparar agentes para producción

Agrega autenticación, almacenamiento, observabilidad y comprobaciones de despliegue para un backend de agente CloudBase.

Prueba estos prompts

Crear un agente inicial

Crea un servidor mínimo de CloudBase Agent en TypeScript usando el adaptador LangGraph. Incluye los archivos requeridos y los pasos para ejecutarlo localmente.

Crear un servidor Python

Crea un servidor de CloudBase Agent en Python con FastAPI y LangGraph. Agrega la configuración de variables de entorno y explica cada paso de despliegue.

Revisar la preparación para el despliegue

Revisa mi proyecto de CloudBase Agent para comprobar la alineación de dependencias, la versión de runtime, CORS, autenticación y preparación para el despliegue.

Diseñar un backend de producción

Diseña un backend multiagente de CloudBase con memoria persistente, middleware de autenticación, observabilidad y un cliente web AG-UI.

Mejores prácticas

Elige primero la ruta de lenguaje y lee solo los archivos de referencia correspondientes.
Usa paquetes actuales de CloudBase Agent y los requisitos de runtime documentados.
Valida la autenticación, CORS, secretos y observabilidad antes del despliegue público.

Evitar

Mezclar instrucciones de despliegue de Python y TypeScript en un mismo proyecto.
Desplegar credenciales de ejemplo, CORS con comodines o secretos JWT de desarrollo en producción.
Ejecutar herramientas de despliegue antes de que pasen las comprobaciones de dependencias y runtime.