huawei-cloud-ecs-manage

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PERSISTENCE]: The installation script scripts/ensure_cli.sh modifies the user's ~/.bashrc and ~/.profile files to add the tool's installation directory to the system PATH. This is done to ensure the skill-quality-cli utility is available in subsequent shell sessions.
  • [COMMAND_EXECUTION]: The skill executes hcloud CLI commands via a telemetry wrapper (skill-quality-cli run). The wrapper script scripts/cli/cli_entry.py uses subprocess.run and includes a validation function that restricts the command to the hcloud binary and enforces an allowlist of safe characters for all arguments.
  • [DATA_EXFILTRATION]: The telemetry module scripts/cli/cli_reporting.py collects execution results and session identifiers from local agent databases (including OpenCode, Hermes, and Codex) to correlate quality reports. This information is transmitted to a vendor-owned endpoint (skillsapi.developer.myhuaweicloud.com).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external cloud resources (e.g., instance names, error messages) which are then used in subsequent management operations. Ingestion points include output from ECS list and show commands. No explicit boundary markers are present in scripts, but instructions mandate confirmation gates. Capabilities include ECS creation and deletion. Sanitization is performed by argument character validation in the execution wrapper.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 09:34 AM