huawei-cloud-devkit-webui-create
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Huawei Cloud CLI (KooCLI) installer and the Kunpeng DevKit software packages from official vendor-owned domains, specifically
obs.cn-north-4.myhuaweicloud.com. All downloads are conducted over HTTPS. - [COMMAND_EXECUTION]: The skill coordinates local deployment tasks by executing shell scripts (
install_devkit_webui.sh) and using the Pythonsubprocessmodule inpoll_devkit_status.py. These operations are used for environment configuration and status monitoring. - [REMOTE_CODE_EXECUTION]: The skill utilizes the
paramikoPython library to establish SSH connections to target ECS instances. It executes installation, automation (expect), and verification scripts on the remote server to deploy the DevKit WebUI environment. - [SAFE_PRACTICE]: Implements robust secret management by generating random passwords in memory, encrypting them via the Huawei Cloud KMS SDK, and decrypting them only within the process memory for SSH authentication. This prevents credentials from appearing in process lists (
ps -ef) or shell history. - [SAFE_PRACTICE]: The installation script
scripts/install_devkit_webui.shincludes a security check that downloads a.p7sdigital signature and performs verification usingopenssl cms -verifybefore extracting the software package to prevent tampering.
Audit Metadata