higress-gateway-management
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with a local management API at
http://127.0.0.1:8001. Interactions with localhost are considered safe and are typical for managing services within a containerized or local environment.- [SAFE]: Authentication credentials (username, password) and sensitive state (session cookies) are managed through pre-configured environment variables such asHICLAW_ADMIN_PASSWORDandHIGRESS_COOKIE_FILE. This is a standard and secure practice for providing credentials to agent-based tools without hardcoding secrets.- [SAFE]: The skill usesjqfor processing JSON data returned from the API, which is a safe and recommended method for handling structured data from external sources.- [SAFE]: No external downloads, remote script execution patterns, or network operations to non-whitelisted domains were identified.- [SAFE]: Command execution is limited to standard administrative tasks for the Higress gateway, and no evidence of privilege escalation or persistence mechanisms was found.
Audit Metadata