cloudbase
tencentcloudbase/cloudbase-skills
Use this skill when you develop, design, build, deploy, debug, migrate, or troubleshoot CloudBase (腾讯云开发, 云开发, TCB, 微信云开发) projects — Web, 微信小程序, 小程序, uni-app, mobile (iOS, Android, Flutter, React Native). Covers UI (页面, 界面, 表单, dashboard, prototype, 原型); auth (登录, 注册, OAuth, publishable key); databases (NoSQL 文档数据库, PostgreSQL/CloudBase PG, 已有 MySQL, app.rdb(), queryPgDatabase/managePgDatabase, CRUD, security rules); 云函数/cloud functions (serverless, scf_bootstrap); CloudRun (云托管, Dockerfile); 云
What it does
- Runs shell commands
- Installs packages
- Reaches 127.0.0.1, accounts.google.com, api.coze.com, api.example.com, api.github.com, api.moonshot.cn, api.openai.com, apm-server, buy.cloud.tencent.com, cloud.langfuse.com, cloud.tencent.com, cnb.cool, console.cloud.google.com, console.cloud.tencent.com, docs.ag-ui.com, docs.cloudbase.net, github.com, grafana, localhost, oauth2.googleapis.com, open.weixin.qq.com, qcloudimg.tencent-cloud.cn, raw.githubusercontent.com, registry.npmjs.org, sentry.io, static.cloudbase.net, tcb-api.cloud.tencent.com, tcb-api.tencentcloud.com, tcb.cloud.tencent.com, undefined, www.googleapis.com, your-frontend.com
- Reads API_KEY, API_SECRET_ID, API_SECRET_KEY, API_TOKEN, CERT_ID, CI_SECRET_API_KEY, CLOUDBASE_APIKEY, CLOUDBASE_ENV_ID, CLOUDBASE_VERSION_NAME, COZE_API_KEY, COZE_BASE_URL, COZE_BOT_ID, DB_URL, DEBUG, DOMAIN, ENV_ID, IMAGE, JWT_SECRET_KEY, LATEST, OPENAI_API_KEY, OPENAI_MODEL, OPENAI_TEMPERATURE, PORT, PYTHONPATH, PYTHON_BIN, SCF_RUNTIME_PORT, SECRET_ID, SECRET_KEY, SESSION_TOKEN, TCB_ENV, TENCENTCLOUD_SECRETID, TENCENTCLOUD_SECRETKEY, TMP_SECRET_ID, TMP_SECRET_KEY
- Writes ./env, ./local.png, .tcloudbaseapp.com, //, /auth.json, 0.1, archive/2024/report.pdf, backup/a.jpg, dest.txt, env/, new-path/config.json, new/data.json
Findings (0)
The scanner found nothing risky in 101 files.
Some of the skill's files couldn't be read, so this check may be incomplete.
Decide which skills your team's agents may run
skillsvault scans every skill your organisation uses, blocks the ones you ban on every developer's machine, and keeps a tamper-evident record of every run. Free for one developer.
A deterministic scan of the skill's files as published today; it isn't a guarantee. It reads the files and reports what they do — nothing is run or installed.