huawei-cloud-ces-aom-capacity-assessment

Warn

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The references/troubleshooting-dns.md file provides instructions for modifying the system /etc/hosts file to resolve DNS connectivity issues with Huawei Cloud endpoints. Modifying configuration files in /etc/ requires root/administrative privileges and affects system-wide network behavior.
  • [COMMAND_EXECUTION]: The skill utilizes the subprocess module to execute the hcloud (KooCLI) binary in scripts/capacity/collector.py and scripts/capacity_cli.py. While used for legitimate monitoring queries, this capability allows the execution of system commands, and the executable path is configurable via CLI arguments or the HCLOUD environment variable.
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its data processing flow.
  • Ingestion points: The skill reads data from user-provided Excel files in scripts/capacity/excel_io.py.
  • Boundary markers: Present. SKILL.md defines a division of labor where the script handles all logic and the model only orchestrates, providing a functional boundary.
  • Capability inventory: The skill can execute system commands (scripts/capacity/collector.py), write to the local filesystem (scripts/capacity/excel_io.py), and query external cloud APIs.
  • Sanitization: Absent. There is no evidence of sanitization for Excel cell content before it is used as command arguments or presented to the user in reports.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 30, 2026, 07:58 AM