qwencloud-payment
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill uses the vendor's own CLI tool for account management and implements a confirmation flow for sensitive actions.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official vendor CLI tool via
npm install -g @qwencloud/qwencloud-cli. This is a standard installation procedure for a skill's required tooling and originates from the vendor's own package scope. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from the CLI commands. While this is an ingestion point for external data, the data originates from the vendor's own infrastructure and is parsed for human-readable display without being used for code execution or network exfiltration.
Audit Metadata