huawei-cloud-devkit-webui-create

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow reads free-text only from locally written remote install logs (e.g., /tmp/devkit_install_wrapper.log and /tmp/devkit_install.log) and remote command outputs, not from any outsider-authored content source that can be posted to or searched without first selecting trusted items.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill downloads and executes external installation artifacts at runtime (the DevKit package and its .p7s signature are fetched and unpacked/executed on the target ECS via wget/ssh, and the hcloud install script / hcloudcli tarballs are also fetched+run in the CLI install guidance), e.g. https://kunpeng-repo.obs.cn-north-4.myhuaweicloud.com/Kunpeng%20DevKit/Kunpeng%20DevKit%2026.1.RC1/DevKit-All-26.1.RC1-Linux-Kunpeng.tar.gz, which is a required runtime dependency that results in remote code being executed.