tencentcloud-cls-alarm

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the official tencentcloud-sdk-python library to facilitate communication with Tencent Cloud services.
  • [SAFE]: Security best practices are followed for credential management by utilizing environment variables (TENCENTCLOUD_SECRET_ID, TENCENTCLOUD_SECRET_KEY, TENCENTCLOUD_REGION) instead of hardcoded secrets.
  • [SAFE]: The accompanying Python script scripts/cls_alarm.py includes safeguards for destructive operations, such as alarm-delete and notice-delete, which require an explicit --yes flag to proceed.
  • [INDIRECT_PROMPT_INJECTION]: The skill features an alarm-log command that retrieves and displays execution logs from Tencent Cloud. While these logs contain externally generated data that could theoretically host malicious instructions, this is a standard functional requirement for a log management tool, and the skill does not automatically execute or pipe this data into unsafe sinks.
  • [COMMAND_EXECUTION]: The skill includes a helper script for CLI access. The command usage documented in SKILL.md uses a path-searching shell snippet to locate the script, which is a benign utility to ensure the tool can be found within the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:55 AM
Security Audit — agent-trust-hub — tencentcloud-cls-alarm