huawei-cloud-devkit-application-check-cli
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the hcloud CLI installation script and tool updates from official Huawei Cloud Object Storage Service (OBS) domains.
- [EXTERNAL_DOWNLOADS]: Downloads Kunpeng DevKit CLI packages from the vendor's official repository at myhuaweicloud.com.
- [EXTERNAL_DOWNLOADS]: Downloads Apache Maven from the official Apache Foundation archive, a well-known and trusted technology service.
- [COMMAND_EXECUTION]: Utilizes the hcloud CLI to programmatically manage cloud infrastructure (ECS, VPC, EIP) within the user's account.
- [COMMAND_EXECUTION]: Executes shell scripts on the local agent environment and the remote DevKit server to automate software installation and configuration.
- [REMOTE_CODE_EXECUTION]: Performs remote management and scan execution on the DevKit ECS instance using the paramiko SSH library and provided shell scripts.
- [INDIRECT_PROMPT_INJECTION]: Processes external data from target server configuration files (nodes.conf) and cloud API responses. Risk is mitigated by a mandatory manual parameter confirmation rule (Rule 9) and the use of the shlex.quote library for robust command sanitization in the Python dispatcher script.
Audit Metadata