huawei-cloud-cdn-domain-ownership-verification

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the hcloud (KooCLI) command-line interface and local Python scripts (file_probe.py, dns_txt_probe.py) to perform diagnostic queries and network probes. These executions are scoped to read-only operations and validate all user-provided inputs such as domain names and IP literals.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, specifically HTTP response bodies and DNS TXT records, which are then included in a diagnosis report. To mitigate risks, the skill caps these content previews at 256 bytes and implements a mandatory content safety rule to redact any strings that resemble credentials or tokens before presentation.
  • [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on well-known, standard Python libraries (requests and dnspython) from official package registries to facilitate network communication.
  • [SAFE]: The skill explicitly defines a perimeter of 55 prohibited non-GET operations (including Create, Update, and Delete actions) to ensure it remains a purely diagnostic, read-only tool. Additionally, it provides clear security instructions to prevent the disclosure of credentials in conversation, guiding users toward secure CLI configuration methods instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:15 AM