huawei-cloud-ecs-passwordless-login

SUSPICIOUS: the skill is broadly aligned with its stated purpose and uses official Huawei services, so it does not look like credential-harvesting malware. However, it performs high-impact cloud and SSH actions, disables SSH trust checks, appends persistent local SSH config, and deliberately preserves root access after key cleanup via ControlMaster, making it a high-risk infrastructure automation skill rather than a low-risk helper.