tencentcloud-dns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data such as domain names and record values which are passed to the Tencent Cloud API.
- Ingestion points: Command-line arguments in
scripts/dns.pyand input variables in the Python workflows defined inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions to prevent the agent from potentially misinterpreting data as instructions during the prompt interpolation process.
- Capability inventory: The skill allows for the full lifecycle management of DNS records, including creation, listing, modification, and deletion, using the
tencentcloud-sdk-pythonlibrary. - Sanitization: The skill relies on standard
argparsevalidation in its CLI script and the validation logic provided by the official Tencent Cloud SDK. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the official
tencentcloud-sdk-pythonpackage from the Python Package Index (PyPI) to facilitate communication with the DNSPod v3 API.
Audit Metadata