huawei-cloud-cdn-traffic-anomaly-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill strictly enforces read-only access to Huawei Cloud CDN resources. The SKILL.md file contains a dedicated section for Prohibited Operations, explicitly barring commands like ModifyDomainConfig, DeleteDomain, and DisableDomain to prevent accidental or malicious impact on production traffic.
- [SAFE]: Credential safety is prioritized. The skill provides clear instructions on how to handle Huawei Cloud Access Keys (AK/SK), emphasizing that these should never be shared in the conversation and should only be managed through official configuration files or environment variables.
- [SAFE]: A robust sanitization mechanism is implemented via Step 3 (Domain Validation). The agent is instructed to verify user-provided domain names against a whitelist generated by querying the official account's domain list, effectively mitigating potential command injection risks from unvalidated input.
- [SAFE]: The included utility script,
scripts/cdn_timestamp.py, is a benign Python script focused exclusively on datetime calculations for timestamp alignment. It does not use any dangerous modules (e.g., subprocess, os, socket) or perform network operations. - [SAFE]: All external resource references, such as the
hcloudCLI and Huawei Cloud documentation URLs, are official vendor resources belonging to the author,huaweicloud.
Audit Metadata