huawei-cloud-cce-cluster-migrator

SUSPICIOUS. The skill’s purpose and most capabilities are coherent for CCE migration, and the documented Huawei CLI flow appears official. The main issue is the primary dependence on k8clone: an insufficiently verifiable external binary that is given cluster credentials via kubeconfig and can read/write both source and target clusters. That makes the skill high risk even without evidence of confirmed malicious intent.

This is a functional-test runner that reads commands from templates/test-vars.json and executes them with shell eval, so an untrusted or compromised test configuration can run arbitrary commands as the invoking user; no specific malicious payload, credential theft, or external destination is shown. Severity is conditional on the trustworthiness of that configuration; the optional -o path also permits a caller-directed report write.