huawei-cloud-cts-trace-management
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official hcloud CLI from a Huawei Cloud Object Storage Service (OBS) bucket (cn-north-4-hcli.obs.cn-north-4.myhuaweicloud.com). This is a legitimate vendor-owned resource.
- [DATA_EXFILTRATION]: A quality reporting SDK is included to transmit execution telemetry (status, error codes, and masked inputs) to the vendor's API endpoint (skillsapi.developer.myhuaweicloud.com). The reporting mechanism includes robust regex-based masking to ensure credentials and sensitive tokens are not exfiltrated.
- [COMMAND_EXECUTION]: Management operations are performed via the hcloud CLI. The skill enforces security best practices by requiring user confirmation (R1/R2) for all write operations, such as creating or deleting trackers and notifications.
Audit Metadata