huawei-cloud-ces-aom-capacity-assessment
Warn
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
references/troubleshooting-dns.mdfile provides instructions for modifying the system/etc/hostsfile to resolve DNS connectivity issues with Huawei Cloud endpoints. Modifying configuration files in/etc/requires root/administrative privileges and affects system-wide network behavior. - [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule to execute thehcloud(KooCLI) binary inscripts/capacity/collector.pyandscripts/capacity_cli.py. While used for legitimate monitoring queries, this capability allows the execution of system commands, and the executable path is configurable via CLI arguments or theHCLOUDenvironment variable. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its data processing flow.
- Ingestion points: The skill reads data from user-provided Excel files in
scripts/capacity/excel_io.py. - Boundary markers: Present.
SKILL.mddefines a division of labor where the script handles all logic and the model only orchestrates, providing a functional boundary. - Capability inventory: The skill can execute system commands (
scripts/capacity/collector.py), write to the local filesystem (scripts/capacity/excel_io.py), and query external cloud APIs. - Sanitization: Absent. There is no evidence of sanitization for Excel cell content before it is used as command arguments or presented to the user in reports.
Audit Metadata