skills/huaweicloud/huaweicloud-skills/huawei-cloud-cdn-domain-ownership-verification/Gen Agent Trust Hub
huawei-cloud-cdn-domain-ownership-verification
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
hcloud(KooCLI) command-line interface and local Python scripts (file_probe.py,dns_txt_probe.py) to perform diagnostic queries and network probes. These executions are scoped to read-only operations and validate all user-provided inputs such as domain names and IP literals. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, specifically HTTP response bodies and DNS TXT records, which are then included in a diagnosis report. To mitigate risks, the skill caps these content previews at 256 bytes and implements a mandatory content safety rule to redact any strings that resemble credentials or tokens before presentation.
- [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on well-known, standard Python libraries (
requestsanddnspython) from official package registries to facilitate network communication. - [SAFE]: The skill explicitly defines a perimeter of 55 prohibited non-GET operations (including Create, Update, and Delete actions) to ensure it remains a purely diagnostic, read-only tool. Additionally, it provides clear security instructions to prevent the disclosure of credentials in conversation, guiding users toward secure CLI configuration methods instead.
Audit Metadata