huawei-cloud-ecs-passwordless-login

SUSPICIOUS. The skill’s capabilities mostly align with its purpose of temporary ECS SSH enablement, and data flows stay within Huawei Cloud plus direct SSH to the user’s instances. However, it grants broad remote access, disables host key verification, persists SSH sessions after key removal, modifies local SSH config, and performs autonomous infrastructure actions; combined with somewhat inconsistent CLI install guidance, this makes the skill risky even without clear evidence of credential theft or malicious exfiltration.