cloud-api-operations
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. The skill's behavior strictly aligns with its stated purpose of cloud resource management.
- [EXTERNAL_DOWNLOADS]: The skill references official Tencent Cloud documentation (cloud.tencent.com), SDK source code (GitHub/TencentCloud), and package registries (NPM). These are trusted sources according to security policy.
- [CREDENTIALS_UNSAFE]: The skill provides guidance on secure credential management, instructing users to use environment variables (
CLOUDBASE_API_KEY) and avoid hardcoding secrets. It also includes instructions for verifying caller identity viasts:GetCallerIdentity. - [COMMAND_EXECUTION]: Includes examples of standard cloud management operations using the
tcbCLI and Node.js SDKs. These commands are necessary for the skill's functionality and are well-documented with security warnings. - [INDIRECT_PROMPT_INJECTION]: The skill includes a robust workflow for API discovery and parameter validation against official schemas, which helps mitigate risks associated with malformed or malicious inputs being passed to cloud APIs.
Audit Metadata