tencentcloud-cls-alarm
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official
tencentcloud-sdk-pythonlibrary to facilitate communication with Tencent Cloud services. - [SAFE]: Security best practices are followed for credential management by utilizing environment variables (
TENCENTCLOUD_SECRET_ID,TENCENTCLOUD_SECRET_KEY,TENCENTCLOUD_REGION) instead of hardcoded secrets. - [SAFE]: The accompanying Python script
scripts/cls_alarm.pyincludes safeguards for destructive operations, such asalarm-deleteandnotice-delete, which require an explicit--yesflag to proceed. - [INDIRECT_PROMPT_INJECTION]: The skill features an
alarm-logcommand that retrieves and displays execution logs from Tencent Cloud. While these logs contain externally generated data that could theoretically host malicious instructions, this is a standard functional requirement for a log management tool, and the skill does not automatically execute or pipe this data into unsafe sinks. - [COMMAND_EXECUTION]: The skill includes a helper script for CLI access. The command usage documented in
SKILL.mduses a path-searching shell snippet to locate the script, which is a benign utility to ensure the tool can be found within the environment.
Audit Metadata