huawei-cloud-dws-cpu-diag
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading Huawei Cloud KooCLI and obsutil binaries from official vendor domains to support diagnostic operations.
- [COMMAND_EXECUTION]: The skill utilizes shell commands via hcloud and tool calls via an MCP server to query cluster status and performance metrics.
- [METADATA_POISONING]: The reference document references/cli-installation-guide.md contains a title referring to OBS Object Storage Statistics, which is inconsistent with the primary DWS CPU diagnosis purpose of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays SQL query text retrieved from database metrics, creating a potential surface for indirect injection. * Ingestion points: SQL strings from the cpu_io_diagnose_detail metric. * Boundary markers: Diagnostic data is constrained within structured HTML table rows. * Capability inventory: The skill is capable of executing hcloud subprocesses and writing HTML files to the local workspace. * Sanitization: Explicit instructions are provided to escape HTML special characters such as <, >, and & within SQL text.
- [PRIVILEGE_ESCALATION]: The installation guides recommend the use of sudo and chmod +x commands to install the required CLI tools into system-wide executable paths.
Audit Metadata