huawei-cloud-computing-query
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The environment setup script (
scripts/ensure_env.py) executes shell commands to create virtual environments, install dependencies viapip, and install system-level packages usingsudowith package managers likeapt,yum,brew, andwinget. - [EXTERNAL_DOWNLOADS]: The skill downloads environment setup components (
get-pip.py) from vendor-owned mirrors (mirrors.huaweicloud.com) and well-known repositories (bootstrap.pypa.io). These are legitimate sources for the skill's functionality. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it retrieves and displays untrusted data from the cloud environment (such as resource names and tags) which could contain malicious instructions targeting the AI agent.
- Ingestion points: Cloud resource metadata (names, IDs, tags, descriptions) retrieved via the Huawei Cloud SDK in all scripts within the
scripts/directory. - Boundary markers: Absent in the script output formats (TSV/JSON).
- Capability inventory: The skill is capable of executing local Python scripts and making network requests to cloud service endpoints.
- Sanitization: No sanitization of retrieved metadata is performed before display.
Audit Metadata