arvancloud-api
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches OpenAPI specification files from ArvanCloud's official site to support API reference lookups.
- [COMMAND_EXECUTION]: The skill uses shell commands including curl, jq, and acme.sh to manage cloud resources and deploy certificates. It includes examples for constructing deployment scripts based on user-provided configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill processes responses from ArvanCloud APIs which represents a surface for untrusted data ingestion.
- Ingestion points: API responses from ArvanCloud endpoints.
- Boundary markers: Not explicitly defined; relies on structured JSON parsing and agent safety filters.
- Capability inventory: Shell command execution, network access for API calls, and local configuration file management.
- Sanitization: Uses jq for JSON processing and requires human confirmation for destructive operations.
Audit Metadata