huawei-cloud-ecs-query
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation describes the installation of the official Huawei Cloud CLI (KooCLI) using a script from a vendor-owned domain (hwcloudcli.obs.cn-north-4.myhuaweicloud.com).
- [COMMAND_EXECUTION]: The skill executes local Python scripts ('scripts/ecs_query.py') to perform its querying functions, which involve reading local configuration files and making network requests to cloud service endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection through the processing of cloud resource metadata.
- Ingestion points: Server metadata such as names, tags, and descriptions are retrieved from the ECS API and processed in 'scripts/formatter.py' for display.
- Boundary markers: No specific delimiters or safety instructions are used to separate resource data from the agent's core instructions.
- Capability inventory: The skill utilizes network access to reach Huawei Cloud API endpoints and local file read access for managing credentials.
- Sanitization: Resource data is displayed using JSON or table formatting without specific sanitization or filtering of natural language content that could influence agent behavior.
Audit Metadata