higress-gateway-management

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with a local management API at http://127.0.0.1:8001. Interactions with localhost are considered safe and are typical for managing services within a containerized or local environment.- [SAFE]: Authentication credentials (username, password) and sensitive state (session cookies) are managed through pre-configured environment variables such as HICLAW_ADMIN_PASSWORD and HIGRESS_COOKIE_FILE. This is a standard and secure practice for providing credentials to agent-based tools without hardcoding secrets.- [SAFE]: The skill uses jq for processing JSON data returned from the API, which is a safe and recommended method for handling structured data from external sources.- [SAFE]: No external downloads, remote script execution patterns, or network operations to non-whitelisted domains were identified.- [SAFE]: Command execution is limited to standard administrative tasks for the Higress gateway, and no evidence of privilege escalation or persistence mechanisms was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 08:12 AM