huawei-cloud-cce-log-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
hcloudandkubectlshell commands to interact with Huawei Cloud services. It implements robust security controls, including strict input validation for cluster identifiers incommon.pyand automated credential redaction in command logging. - [EXTERNAL_DOWNLOADS]: References and instructions for installing official Huawei Cloud tools and SDKs (KooCLI and
huaweicloudsdklts) are included. These downloads originate from verified vendor-controlled domains and repositories. - [DATA_EXFILTRATION]: Integrates a quality reporting SDK (
skill_quality_sdk.py) that transmits execution metadata to a vendor-owned endpoint (skillsapi.developer.myhuaweicloud.com). The SDK includes data masking to prevent the leakage of sensitive information such as tokens or secrets. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (application and audit logs). It mitigates injection risks by enforcing read-only defaults for query tools and requiring explicit user confirmation before any mutation or configuration changes are applied.
Audit Metadata