Skills cloudbase-agent

📦

cloudbase-agent

Name: cloudbase-agent
Author: tencentcloudbase

v2.23.8 Content revision r1 High Risk 🌐 Network access🔑 Env variables⚙️ External commands📁 Filesystem access⚡ Contains scripts

Build CloudBase AI Agent Backends

Agent services need consistent server, adapter, deployment, and UI patterns. This skill guides CloudBase Agent SDK projects in TypeScript and Python.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "cloudbase-agent" from https://skillstore.io/skills/tencentcloudbase-cloudbase-agent.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-cloudbase-agent/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tencentcloudbase-cloudbase-agent.md Signed manifest GET /api/skills/tencentcloudbase-cloudbase-agent/manifest Signed lockfile GET /api/skills/tencentcloudbase-cloudbase-agent/lockfile

Test it

Using "cloudbase-agent". Create a TypeScript LangGraph agent and deploy it to CloudBase.

Expected outcome:

Adapter selection with required CloudBase packages.
Server setup outline for AG-UI and OpenAI-compatible endpoints.
Deployment checklist using CloudBase Agent runtime requirements.

Using "cloudbase-agent". Add authentication and observability to a Python agent server.

Expected outcome:

Middleware plan for validated user context.
Environment variable list for model and tracing providers.
Production checks for CORS, secrets, and endpoint exposure.

Using "cloudbase-agent". Connect a web client to my agent service.

Expected outcome:

The skill identifies the AG-UI client path, endpoint shape, streaming behavior, and deployment considerations.

Security Audit

High Risk

v2 • 7/9/2026 Open versioned report

Most static hits are documentation examples or markdown syntax, including placeholder secrets, local URLs, dotenv usage, and inline code. Confirmed risks remain in authentication examples, unverified JWT decoding, public interface binds, shell-based deployment steps, and wildcard CORS guidance.

Files scanned

5,743

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (10)

High

py/adapter-coze.md:221

System reconnaissance

logger.warning("Missing or invalid Authorization header")

The middleware logs a missing or invalid Authorization header and then continues as an anonymous user. That behavior can bypass authentication for protected agent actions.

High

py/authentication.md:79

System reconnaissance

# Handle invalid token (log but don't block in this example)

The basic JWT example explicitly handles an invalid token by logging rather than blocking. The request then continues to the agent, which is an authentication bypass if reused.

High

py/authentication.md:80

System reconnaissance

print(f"Invalid JWT token: {e}")

The invalid token branch only prints the error in the basic middleware example. Because execution continues afterward, this is a real unsafe pattern.

High

py/authentication.md:82

System reconnaissance

# raise InvalidRequestError(message="Invalid authentication token")

The blocking exception is commented out in the basic authentication example. That makes the shown code continue after invalid authentication.

High

ts/adapter-langchain.md:58

Base64 decode

const payload = JSON.parse(atob(token.split(".")[1]));

The code decodes a JWT payload with atob and uses the sub claim for tenant isolation without signature verification. This can let a caller spoof user identity.

High

ts/adapter-langgraph.md:64

Base64 decode

const payload = JSON.parse(atob(token.split(".")[1]));

The code decodes a JWT payload with atob and uses the sub claim for tenant isolation without signature verification. This can let a caller spoof user identity.

High

py/adapter-coze.md:213-228

Authentication Fallback Allows Anonymous Requests

The Coze middleware uses a dev-secret fallback and continues requests as user anonymous when the Authorization header is missing or invalid. This can turn a protected agent endpoint into an unauthenticated endpoint if copied into production.

The cited example directly sets a predictable JWT secret fallback and yields after assigning an anonymous user on missing authentication.

High

py/authentication.md:78-84

Invalid JWT Example Continues Execution

The basic authentication middleware logs InvalidTokenError and then yields to the agent instead of blocking the request. Later secure guidance exists, but this initial example is unsafe if reused.

The code catches InvalidTokenError, prints the error, leaves the blocking exception commented out, and reaches the yield statement.

Show all 10 confirmed findings

High

ts/adapter-langchain.md:56-64 ts/adapter-langgraph.md:62-69

Unverified JWT Payload Used for Tenant Isolation

TypeScript adapter examples parse the JWT body with atob and use payload.sub for CloudBaseSaver userId. The signature is not verified before using that value for tenant isolation.

Both examples decode the JWT payload client-side and trust sub for storage isolation without a verification step.

Medium

py/skill.md:106-111 py/adapter-coze.md:272-282 py/agent-deployment.md:340-356 ts/server-quickstart.md:78-83

Wildcard CORS in Agent Server Examples

TypeScript and Python examples enable broad CORS on agent endpoints, including FastAPI credentialed CORS. Public agent APIs should use explicit origin allowlists in production.

The cited snippets enable wildcard or broadly enabled CORS for agent servers, and one FastAPI example also enables credentials.

Capability review items (18)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

py/adapter-coze.md:213

Python getenv function

JWT_SECRET = os.getenv("JWT_SECRET_KEY", "dev-secret")

The example falls back to JWT_SECRET_KEY="dev-secret", which can create forgeable JWTs if copied into production. This is a real authentication weakness, not just configuration access.

High

py/adapter-coze.md:213

getenv function call

JWT_SECRET = os.getenv("JWT_SECRET_KEY", "dev-secret")

The getenv call supplies a hardcoded dev-secret fallback for JWT signing. A missing environment variable would silently weaken authentication.

High

py/adapter-coze.md:213

Generic API/secret keys

JWT_SECRET = os.getenv("JWT_SECRET_KEY", "dev-secret")

JWT_SECRET falls back to a predictable value named dev-secret. This creates a credible credential weakness when reused beyond local development.

Medium

py/adapter-coze.md:282

Hardcoded IP address

host="0.0.0.0"

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

py/agent-deployment.md:92

Shell command substitution

PROJECT_DIR="$(pwd)"

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

py/agent-deployment.md:104

Shell command substitution

echo "✅ Using: $PYTHON_BIN ($($PYTHON_BIN --version 2>&1))"

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

py/agent-deployment.md:89

Unix shell invocation

#!/bin/bash

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

py/agent-deployment.md:322

Unix shell invocation

#!/bin/bash

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

py/agent-deployment.md:377

Unix shell invocation

#!/bin/bash

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

py/agent-deployment.md:314

Hardcoded IP address

AgentServiceApp().run(create_agent, port=port, host="0.0.0.0")

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

py/references/recipes.md:32

Hardcoded IP address

server.run(host="0.0.0.0", port=9000)

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

py/references/server.md:36

Hardcoded IP address

uvicorn.run(fastapi_app, host="0.0.0.0", port=9000)

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

py/server-quickstart.md:277

Hardcoded IP address

uvicorn.run(app, host="0.0.0.0", port=9000)

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

py/server-quickstart.md:447

Hardcoded IP address

--bind 0.0.0.0:9000

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

py/skill.md:111

Hardcoded IP address

app.run(create_agent, port=port, host="0.0.0.0")

The example binds an agent service to 0.0.0.0, which exposes it on all interfaces when run directly. This is common for deployment but needs authentication and network controls.

Medium

ts/agent-deployment.md:74

Unix shell invocation

#!/bin/sh

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

ts/agent-deployment.md:84

Unix shell invocation

> **NOTE**: Use `#!/bin/sh` (not `#!/bin/bash`) for maximum compatibility. The entry point should ma

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Medium

ts/agent-deployment.md:137

Unix shell invocation

| **Startup script** | `scf_bootstrap` — `#!/bin/sh` + `node src/index.js` |

The deployment guide contains shell script templates that a coding agent may execute during packaging or startup setup. The commands are legitimate but still create real local execution risk.

Risk Factors

🌐 Network access (37)

py/adapter-coze.md:58 py/adapter-coze.md:125 py/adapter-coze.md:136 py/adapter-coze.md:282 py/adapter-langgraph.md:235 py/adapter-langgraph.md:295 py/agent-deployment.md:314 py/authentication.md:431 py/authentication.md:456 py/authentication.md:468 py/references/observability.md:312 py/references/observability.md:360 py/references/observability.md:364 py/references/observability.md:134 py/references/observability.md:233 py/references/observability.md:301 py/references/observability.md:328 py/references/recipes.md:300 py/references/recipes.md:32 py/references/server.md:36 py/references/tools.md:55 py/references/tools.md:87 py/server-quickstart.md:291 py/server-quickstart.md:304 py/server-quickstart.md:321 py/server-quickstart.md:338 py/server-quickstart.md:397 py/server-quickstart.md:430 py/server-quickstart.md:277 py/server-quickstart.md:447 py/skill.md:111 SKILL.md:14 SKILL.md:15 ts/server-quickstart.md:82 ts/server-quickstart.md:128 ts/server-quickstart.md:138 ts/ui-clients.md:16

🔑 Env variables (50)

⚙️ External commands (50)

py/agent-deployment.md:92 py/agent-deployment.md:104 py/agent-deployment.md:89 py/agent-deployment.md:322 py/agent-deployment.md:377 py/skill.md:26 py/skill.md:27 py/skill.md:28 py/skill.md:29 py/skill.md:46 py/skill.md:60 py/skill.md:61 py/skill.md:62 py/skill.md:63 py/skill.md:78-87 py/skill.md:87-91 py/skill.md:91-112 py/skill.md:112-122 py/skill.md:122-142 py/skill.md:142-146 py/skill.md:146 py/skill.md:148-161 py/skill.md:161-163 py/skill.md:163-164 py/skill.md:164-169 py/skill.md:169-179 py/skill.md:179-181 py/skill.md:181-182 py/skill.md:182-183 py/skill.md:183-184 py/skill.md:184-188 py/skill.md:188-213 py/skill.md:213-217 py/skill.md:217-227 py/skill.md:227-233 py/skill.md:233-234 py/skill.md:234 py/skill.md:235 py/skill.md:236 py/skill.md:237-242 py/skill.md:242-243 py/skill.md:243-244 py/skill.md:244 py/skill.md:245-246 SKILL.md:12 SKILL.md:14 SKILL.md:15 SKILL.md:17 ts/agent-deployment.md:74 ts/agent-deployment.md:84

📁 Filesystem access (4)

py/agent-deployment.md:46 py/agent-deployment.md:96 py/agent-deployment.md:215 py/agent-deployment.md:215

⚡ Contains scripts (5)

py/references/observability.md:56-61 py/references/recipes.md:240 py/references/recipes.md:246 py/server-quickstart.md:17-22 py/server-quickstart.md:171-179

Detected Patterns

System reconnaissance×4

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-agent/security.svg)](https://skillstore.io/skills/tencentcloudbase-cloudbase-agent?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tencentcloudbase-cloudbase-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-cloudbase-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-cloudbase-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tencentcloudbase. (2026). cloudbase-agent security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2

BibTeX citation

@techreport{tencentcloudbase-tencentcloudbase-cloudbase-agent-2026,
  author = {tencentcloudbase},
  title = {cloudbase-agent security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudbase-agent security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-cloudbase-agent/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-cloudbase-agent:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Launch an Agent API

Create a CloudBase Agent server with AG-UI streaming and deploy it with the recommended runtime.

Connect an Agent UI

Build a web or Mini Program client that streams events from CloudBase Agent endpoints.

Prepare Production Agents

Add authentication, storage, observability, and deployment checks for a CloudBase agent backend.

Try These Prompts

Create a Starter Agent

Create a minimal TypeScript CloudBase Agent server using the LangGraph adapter. Include required files and local run steps.

Build a Python Server

Build a Python CloudBase Agent server with FastAPI and LangGraph. Add environment variable setup and explain each deployment step.

Review Deployment Readiness

Review my CloudBase Agent project for dependency alignment, runtime version, CORS, authentication, and deployment readiness.

Design a Production Backend

Design a multi-agent CloudBase backend with persistent memory, authentication middleware, observability, and a web AG-UI client.

Best Practices

Choose the language path first and read only the matching reference files.
Use current CloudBase Agent packages and the documented runtime requirements.
Validate authentication, CORS, secrets, and observability before public deployment.

Avoid

Mixing Python and TypeScript deployment instructions in one project.
Deploying sample credentials, wildcard CORS, or development JWT secrets to production.
Calling deployment tools before dependency and runtime checks pass.