tencentcloud-cls-alarm
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Provides the
scripts/cls_alarm.pyutility to wrap Tencent Cloud CLS API operations for alarm and notice management. - [EXTERNAL_DOWNLOADS]: Utilizes the official
tencentcloud-sdk-pythonlibrary for cloud service interactions. - [PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection through the ingestion of external cloud log data.
- Ingestion points: Fetches data via
GetAlarmLoginscripts/cls_alarm.pyandSKILL.mdexamples. - Boundary markers: Lacks explicit delimiters for log content, though documentation mandates human confirmation for destructive tasks.
- Capability inventory: Includes capabilities to create, modify, and delete cloud alarm policies and notice configurations.
- Sanitization: Log content and alarm metadata are presented as-is from the cloud provider without additional sanitization.
- [SAFE]: Credentials are managed via
TENCENTCLOUD_SECRET_IDandTENCENTCLOUD_SECRET_KEYenvironment variables rather than being hardcoded.
Audit Metadata