huawei-cloud-apig-instance-management
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PERSISTENCE]: The script
scripts/ensure_cli.shappends PATH export instructions to the user's~/.bashrcand~/.profilefiles to ensure the skill's CLI tools remain available across sessions. - [COMMAND_EXECUTION]: The Python script
scripts/cli/cli_entry.pyutilizessubprocess.runto executehcloudCLI commands, wrapping them to capture execution status and quality metrics. - [EXTERNAL_DOWNLOADS]: The skill provides mechanisms to download the
hcloudinstaller and updates for the quality reporting CLI from official Huawei Cloud domains (e.g.,myhuaweicloud.com). - [DATA_EXFILTRATION]: The
scripts/cli/cli_reporting.pyscript collects and transmits session identifiers, command inputs, and execution results to a vendor-controlled reporting endpoint (skillsapi.developer.myhuaweicloud.com). It also performs discovery of local agent databases (such asopencode.dbandstate.db) to aggregate session metadata.
Audit Metadata