huawei-cloud-config-helper
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standalone, read-only tool for querying the Huawei Cloud Config service. It does not perform any write operations.
- [SAFE]: Credential management (AK/SK) is handled through environment variables (
HW_ACCESS_KEY,HW_SECRET_KEY). The implementation inscripts/config.pyexplicitly includes error handling designed to prevent the leakage of these credentials in output or error messages. - [SAFE]: In
scripts/config/query_Config_resource_summary.py, input parameters are validated using a strict regular expression (^[A-Za-z0-9_.-]+$) before being interpolated into SQL queries, effectively mitigating SQL injection risks for those parameters. - [SAFE]: All identified Python dependencies (
huaweicloudsdkcore,huaweicloudsdkconfig,urllib3) are standard, official libraries required for the skill's stated purpose. - [SAFE]: The skill instructions and code are consistent with the provided purpose of auditing and inventorying cloud resources. No malicious patterns such as obfuscation, exfiltration to untrusted domains, or persistence mechanisms were detected.
Audit Metadata