huawei-cloud-devbridge-tunnel
Fail
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes an installation script from 'https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh'. This domain is a known resource associated with Huawei Cloud CDN services.
- [REMOTE_CODE_EXECUTION]: The skill uses a piped-to-shell execution pattern ('curl | bash') for the installation of the DevBridge CLI. While originating from an official vendor source, this pattern executes remote code on the local system.
- [COMMAND_EXECUTION]: The helper script 'scripts/devbridge_cmd.sh' utilizes the 'eval' command to execute shell strings constructed from variables like tunnel names, descriptions, and ports. If an agent passes unsanitized user input into these parameters, it creates a risk of command injection.
- [COMMAND_EXECUTION]: Instructions in 'SKILL.md' explicitly mandate that the agent perform destructive operations, such as deleting all tunnels or ports, without asking the user for confirmation. This reduces human oversight for significant environment changes.
- [COMMAND_EXECUTION]: The skill launches background processes using 'nohup' (e.g., local HTTP servers and tunnel hosting) and redirects their output to logs in the '/tmp' directory.
- [PROMPT_INJECTION]: The skill contains a vulnerability surface for indirect prompt injection where untrusted data (like tunnel names provided by a user or external source) is interpolated into shell commands without sanitization or boundary markers.
Recommendations
- HIGH: Downloads and executes remote code from: https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh - DO NOT USE without thorough review
Audit Metadata