huawei-cloud-cdn-dns-resolution-diagnosis
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
hcloudCLI and a local Python scriptscripts/dns_resolve.py. These operations are strictly read-only and limited to diagnostic queries and DNS A-record lookups. - [CREDENTIALS_SAFE]: The skill implements robust security practices for Huawei Cloud credentials, explicitly forbidding the reading or echoing of Access Keys and directing users to configure credentials through environment variables or secure CLI configuration files.
- [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the
dnspythonlibrary, which is a reputable and well-known package from the official Python Package Index (PyPI). - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided domain names, it includes active mitigation by validating inputs against an RFC 1035 regular expression in the local probe script, preventing command injection or unexpected behavior.
- [PRIVILEGE_ESCALATION]: The instructions do not involve gaining elevated permissions, modifying system configuration files, or installing unauthorized background services.
Audit Metadata