huawei-cloud-cc-instance-query
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Huawei Cloud KooCLI installer located at
https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh. This download originates from the vendor's own verified Object Storage Service domain. - [REMOTE_CODE_EXECUTION]: A remote execution pattern is documented in the installation guide (
curl | bashscript execution). While typically a high-risk pattern, it is used here to install the official service provider's CLI tool from their trusted domain, following standard vendor documentation. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through the
hcloudCLI. The analysis confirms that all documented operations are strictly read-only (e.g.,ListCloudConnections,ShowBandwidthPackage), posing no risk of unauthorized modification to cloud resources. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided IDs and account identifiers to populate command templates. While it lacks explicit output sanitization instructions, the primary data flow involves passing these identifiers to the official CLI tool which performs its own parameter validation, and the risk is limited by the read-only nature of the capabilities.
Audit Metadata