qwencloud-payment

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill uses the vendor's own CLI tool for account management and implements a confirmation flow for sensitive actions.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the official vendor CLI tool via npm install -g @qwencloud/qwencloud-cli. This is a standard installation procedure for a skill's required tooling and originates from the vendor's own package scope.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from the CLI commands. While this is an ingestion point for external data, the data originates from the vendor's own infrastructure and is parsed for human-readable display without being used for code execution or network exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 01:31 PM