Skills cloudrun-development

📦

cloudrun-development

Name: cloudrun-development
Author: tencentcloudbase

v2.23.8 Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Deploy CloudBase Run Backends

CloudBase Run projects require clear mode, access, and deployment choices. This skill guides Claude, Codex, and Claude Code through reliable CloudBase Run backend workflows.

Supports: Claude Codex Code(CC)

📊 72 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "cloudrun-development" from https://skillstore.io/skills/tencentcloudbase-cloudrun-development.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-cloudrun-development/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tencentcloudbase-cloudrun-development.md Signed manifest GET /api/skills/tencentcloudbase-cloudrun-development/manifest Signed lockfile GET /api/skills/tencentcloudbase-cloudrun-development/lockfile

Test it

Using "cloudrun-development". I need a public SSE backend with low startup latency.

Expected outcome:

Recommend Function mode because the service uses streaming and does not require a custom container.
Use public web access only after confirming the authentication flow.
Set minimum instances above zero if the user accepts the added cost.

Using "cloudrun-development". My CloudBase Run deploy failed after a Dockerfile change.

Expected outcome:

Inspect the latest deployment log before changing configuration.
Check that the container listens on the platform port.
Verify the CPU and memory ratio before redeploying.

Using "cloudrun-development". I want to delete an old CloudBase Run service.

Expected outcome:

Ask for explicit confirmation before deletion.
Verify the target service name and environment.
Use the delete operation only after the user confirms the destructive action.

Security Audit

Medium Risk

v2 • 7/9/2026 Open versioned report

Most static findings are Markdown formatting false positives, including backticks around tool names, paths, settings, and JSON examples. No prompt injection, data exfiltration, or malicious execution intent was found, but the skill does direct agents to unpinned remote fallback instruction files.

Files scanned

181

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:12-15 SKILL.md:34-36

Unpinned Remote Instruction Loading

The skill tells agents to use live raw URLs on the main branch as fallback sources for this and sibling skills. This can cause agents to consume instructions that were not included in the audited package.

The referenced fallback URLs explicitly use the main branch and are outside the single-file package. The risk is supply-chain drift, not proven malicious behavior.

Risk Factors

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tencentcloudbase-cloudrun-development/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-cloudrun-development/security.svg)](https://skillstore.io/skills/tencentcloudbase-cloudrun-development?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tencentcloudbase-cloudrun-development?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-cloudrun-development/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-cloudrun-development.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tencentcloudbase. (2026). cloudrun-development security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-cloudrun-development/audits/2

BibTeX citation

@techreport{tencentcloudbase-tencentcloudbase-cloudrun-development-2026,
  author = {tencentcloudbase},
  title = {cloudrun-development security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-cloudrun-development/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudrun-development security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-cloudrun-development/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-cloudrun-development:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Launch a streaming backend

Choose the right CloudBase Run mode and deploy an HTTP, SSE, or WebSocket backend.

Move a container service

Prepare a container-based service for CloudBase Run with correct port, access, and resource settings.

Create an Agent service

Use Function mode CloudBase Run guidance for Agent service creation and deployment checks.

Try These Prompts

Choose a CloudBase Run mode

Use cloudrun-development to decide whether my backend should use Function mode or Container mode. Explain the tradeoffs for my service requirements.

Initialize a Function mode service

Use cloudrun-development to initialize a CloudBase Run Function mode service for an HTTP API. Include the required runtime checks before deployment.

Deploy with access controls

Use cloudrun-development to deploy my CloudBase Run service with the correct public, Mini Program, private, or VPC access model.

Debug a failed deployment

Use cloudrun-development to inspect my failed CloudBase Run deployment, review deploy logs, and propose fixes for runtime, Dockerfile, or resource issues.

Best Practices

Choose Function mode or Container mode before creating project files.
Keep services stateless and store durable data in managed storage.
Verify access type and deployment details before public use.

Avoid

Using CloudBase Run for simple tasks that fit a cloud function.
Opening public access when private or Mini Program access is enough.
Assuming Container mode can use local run tooling.

Frequently Asked Questions

When should I use this skill?

Use it when building, deploying, inspecting, or debugging a CloudBase Run backend service.

Does it support both CloudBase Run modes?

Yes. It explains when to use Function mode and when Container mode is a better fit.

Can it deploy a service for me?

It can guide managed CloudBase Run deployment actions when the required tools and permissions are available.

Does it handle delete operations safely?

The skill states that delete operations require explicit confirmation and the force setting.

Is it useful for frontend-only projects?

No. It is intended for backend services, not frontend-only projects.

Does it include troubleshooting guidance?

Yes. It covers access failures, deployment failures, local run limits, and performance issues.

Developer Details

Author

tencentcloudbase

License

MIT

Author version

v2.23.8

Skillstore revision

Repository

https://github.com/tencentcloudbase/skills/tree/main/skills/cloudrun-development

Ref

24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec

Maintenance freshness

7/18/2026

Usage

1 downloads · 0 views

File structure

📄 SKILL.md