huawei-cloud-alarm-reduce-noise
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the official Huawei Cloud CLI (hcloud) via subprocess calls to query alarm history and project settings. This interaction is a standard method for cloud management. \n- [EXTERNAL_DOWNLOADS]: Reference documentation points to official Huawei Cloud domains for downloading the hcloud CLI tool, which are verified vendor resources. \n- [REMOTE_CODE_EXECUTION]: Setup guides describe an installation method for the hcloud CLI using a script from a verified vendor domain (myhuaweicloud.com). This is a standard deployment pattern for the service. \n- [DYNAMIC_EXECUTION]: The script check_env.py uses dynamic imports to confirm that required Python dependencies are present in the environment. \n- [INDIRECT_PROMPT_INJECTION]: The skill handles alarm data from external sources and generates an HTML report. It employs html.escape() to sanitize all dynamic content, ensuring safe rendering of external data. \n- [SAFE]: Heuristic detections of destructive system commands in the CLI guide are false positives involving standard cleanup and uninstallation steps.
Audit Metadata