huawei-cloud-account-onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/show_real_name_auth_status.pyinvokessubprocess.runto execute itself for a self-test feature (--missing-creds-check). This implementation uses hardcoded paths and a controlled environment to verify the script's own error handling for missing credentials, presenting no injection risk. - [EXTERNAL_DOWNLOADS]: Documentation in
references/cli-installation-guide.mdprovides instructions to download the Huawei Cloud CLI installer from official vendor domains. The process includes a mandatory SHA256 checksum verification step to validate the integrity of the downloaded file before execution. - [EXTERNAL_DOWNLOADS]: The skill declares a dependency on
huaweicloudsdkbssin itsrequirements.txtandreferences/cli-installation-guide.md, which is the official Python SDK for the BSS service. This follows standard integration practices for the intended cloud platform.
Audit Metadata