huawei-cloud-dws-io-diag
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external shell commands using the official Huawei Cloud CLI (
hcloud) to retrieve cluster metadata and monitoring metrics. It also performs local file processing using Python snippets (python -c) to parse configuration data fromconf/dws_config.yaml.- [EXTERNAL_DOWNLOADS]: The skill's documentation provides instructions and URLs for downloading the Huawei Cloud CLI (hcloud) from official Huawei Cloud Object Storage Service (OBS) domains. These references are for legitimate tool installation.- [PROMPT_INJECTION]: The skill processes untrusted external data, specifically SQL query text and usernames retrieved from cluster metrics, which presents an indirect prompt injection surface. The skill mitigates common web-based attacks by escaping HTML characters (<,>,&) in its final report rendering.- [SAFE]: All identified behaviors, including command execution and network requests, are strictly scoped to the vendor's own infrastructure and tools required for the skill's diagnostic functions.
Audit Metadata