huawei-cloud-cce-alarm-correlation-engine
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill securely executes the official
hcloudCLI to manage Huawei Cloud resources. It uses list-based arguments forsubprocess.run, which effectively prevents shell injection vulnerabilities.\n- [SAFE]: Implements robust credential protection. A redaction function is used to mask sensitive data (Access Keys, Secret Keys, and tokens) in all logged commands and user-facing outputs.\n- [SAFE]: Employs a risk-aware execution model (R0-R3). Any operation that modifies the cloud environment requires a preview phase followed by explicit user confirmation before the changes are applied.\n- [SAFE]: Adheres to secure coding practices for temporary data. JSON payloads for the CLI are stored in temporary files that are automatically and reliably deleted after execution usingfinallyblocks.
Audit Metadata