huawei-cloud-cdn-origin-diagnosis
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official hcloud CLI to query CDN configurations and execute a local Python script for network connectivity tests. Use of the vendor-provided CLI tool is the intended primary purpose.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the requests library, which is a well-known and trusted Python package for HTTP operations. This dependency is documented for the connectivity probe.
- [INDIRECT_PROMPT_INJECTION]: The skill processes configuration data such as origin addresses and ports retrieved from the Huawei Cloud CDN API. It mitigates the risk of processing malicious data by implementing strict validation (IP literal or RFC 1035 domain patterns) in the Python probe script before establishing any network connections.
- [CREDENTIALS_UNSAFE]: The skill includes explicit instructions and workflows designed to prevent the exposure of Huawei Cloud AK/SK credentials. It prohibits direct input of secrets in conversations and guides users toward secure local configuration via the hcloud CLI.
Audit Metadata