huawei-cloud-cloudrobo-r2c
Warn
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill supports dynamic loading of Python classes for hardware adapters and translators through CLI arguments and configuration YAML. Loading code from user-provided dotted paths poses a risk of arbitrary code execution.
- [DYNAMIC_EXECUTION]: The system uses the Python
pickleformat for recording and replaying observations. Deserializing untrusted pickle data is unsafe and can lead to code execution. - [INDIRECT_PROMPT_INJECTION]: Untrusted data from robot sensors and cloud publishers is ingested, including a 'task' context field. Ingestion points: robot sensor data and cloud actions. Boundary markers: none. Capability inventory: network operations, file writes, hardware control. Sanitization: none. This creates a surface for potential injection attacks.
- [EXTERNAL_DOWNLOADS]: The skill requires several external Python dependencies, such as
hw-cloudrobo-r2candopenpi-client, to be installed via pip.
Audit Metadata