huawei-cloud-dws-mem-diag
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
hcloud(KooCLI) commands to perform administrative tasks such as listing clusters, fetching metrics, and retrieving host information from Huawei Cloud APIs. - [COMMAND_EXECUTION]: Employs
python -csnippets to perform timestamp conversions for report generation. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the Huawei Cloud CLI (
hcloud) from vendor-controlled Object Storage Service (OSS) buckets atobs.cn-north-1.myhuaweicloud.com. - [EXTERNAL_DOWNLOADS]: References the official Huawei Cloud MCP Server repository on GitHub (
github.com/huaweicloud) for extended diagnostic features. - [DATA_EXFILTRATION]: Reads diagnostic data, including system metrics, active SQL session details, and user names, from the DWS cluster. This data is used to generate a local HTML report within the workspace environment.
- [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it processes untrusted data from the database (specifically SQL queries and usernames).
- Ingestion points: Fetched via the
memory_diagnose_detailmetric throughhcloudor MCP tools. - Boundary markers: None explicitly defined for prompt isolation.
- Capability inventory: Shell command execution, Python evaluation, and file system writes (generating reports).
- Sanitization: The skill mitigates risks by requiring HTML character escaping (escaping
<,>,&) when generating the final report to prevent cross-site scripting (XSS) or agent manipulation.
Audit Metadata