huawei-cloud-ascend-command
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill translates natural language instructions into
npu-smiandascend-dmisystem commands. Local execution is handled viasubprocess.runusingshlex.splitandshell=Falseto mitigate shell injection risks. - [COMMAND_EXECUTION]: Remote management capability is provided via SSH using the
paramikolibrary. The skill accepts host, user, and password parameters as command-line arguments to establish these connections. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
paramikoPython package to support its remote SSH functionality. - [SAFE]: High-impact operations, such as firmware upgrades, virtualization management, and ECC configuration, are protected by a mandatory confirmation workflow in
scripts/executor.py. This ensures that sensitive actions require an explicit 'confirm' response from the user before execution. - [SAFE]: Credential handling follows security guidelines; passwords are accepted only as one-time command-line arguments, and the instructions explicitly prohibit logging or echoing these values.
Audit Metadata