tencentcloud-dns

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data such as domain names and record values which are passed to the Tencent Cloud API.
  • Ingestion points: Command-line arguments in scripts/dns.py and input variables in the Python workflows defined in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions to prevent the agent from potentially misinterpreting data as instructions during the prompt interpolation process.
  • Capability inventory: The skill allows for the full lifecycle management of DNS records, including creation, listing, modification, and deletion, using the tencentcloud-sdk-python library.
  • Sanitization: The skill relies on standard argparse validation in its CLI script and the validation logic provided by the official Tencent Cloud SDK.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the official tencentcloud-sdk-python package from the Python Package Index (PyPI) to facilitate communication with the DNSPod v3 API.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:10 AM