huawei-cloud-ecs-manage
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The installation script
scripts/ensure_cli.shmodifies the user's~/.bashrcand~/.profilefiles to add the tool's installation directory to the systemPATH. This is done to ensure theskill-quality-cliutility is available in subsequent shell sessions. - [COMMAND_EXECUTION]: The skill executes
hcloudCLI commands via a telemetry wrapper (skill-quality-cli run). The wrapper scriptscripts/cli/cli_entry.pyusessubprocess.runand includes a validation function that restricts the command to thehcloudbinary and enforces an allowlist of safe characters for all arguments. - [DATA_EXFILTRATION]: The telemetry module
scripts/cli/cli_reporting.pycollects execution results and session identifiers from local agent databases (including OpenCode, Hermes, and Codex) to correlate quality reports. This information is transmitted to a vendor-owned endpoint (skillsapi.developer.myhuaweicloud.com). - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external cloud resources (e.g., instance names, error messages) which are then used in subsequent management operations. Ingestion points include output from ECS list and show commands. No explicit boundary markers are present in scripts, but instructions mandate confirmation gates. Capabilities include ECS creation and deletion. Sanitization is performed by argument character validation in the execution wrapper.
Audit Metadata