huawei-cloud-ecs-query
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the official Huawei Cloud CLI (KooCLI) by downloading a shell script from the vendor's domain at
hwcloudcli.obs.cn-north-4.myhuaweicloud.comand executing it. This is a standard administrative procedure from an official source. - [INDIRECT_PROMPT_INJECTION]: The skill queries the Huawei Cloud ECS API, which introduces a potential surface for indirect prompt injection if the API returns attacker-controlled data.
- Ingestion points: Data is fetched from official API endpoints at
ecs.{region}.myhuaweicloud.comwithinscripts/ecs_query.py. - Boundary markers: No specific delimiters or warnings are used in the prompt templates when displaying API results to the agent.
- Capability inventory: The skill possesses network access via the
requestslibrary and the ability to read local configuration files. - Sanitization: The tool parses structured JSON responses and extracts specific fields using
scripts/formatter.pyto display them as formatted tables or JSON, which helps mitigate the risk of accidental instruction obedience. - [CREDENTIALS_UNSAFE]: To perform queries, the skill requires cloud authentication credentials (AK/SK or Token). It follows security best practices by recommending that users store these credentials in a local configuration file at
~/.huawei-ecs/config.yamlrather than hardcoding them in the skill's source code or prompts.
Audit Metadata