huawei-cloud-ecs-shutdown-experiment
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
subprocess.runto call the Huawei Cloud CLI (hcloud/ KooCLI) across multiple scripts, includingdiscover_ecs.py,execute_experiment.py, andmonitor_instances.py. This is the intended mechanism for the skill's cloud management functions. Environment variable whitelisting is used to ensure only necessary variables are passed to these child processes. - [INDIRECT_PROMPT_INJECTION]: The log analysis functionality in
scripts/analyze_logs.pyrepresents an indirect prompt injection surface as it ingests external data. - Ingestion points:
scripts/collect_logs.pyfetches application log messages from the Huawei Cloud LTS (Log Tank Service). - Boundary markers: Log data is interpolated into Markdown reports without specific boundary delimiters or "ignore instructions" warnings.
- Capability inventory: The skill can write files to the local disk and execute ECS shutdown/start commands via the Huawei Cloud API.
- Sanitization: Log messages are truncated for display but are not explicitly sanitized for potential Markdown or prompt control character injection.
- [DYNAMIC_EXECUTION]: The
scripts/deploy_experiment.shscript dynamically generates an emergencyrollback_experiment.shscript at runtime. The generation process uses shell-quoting (printf %q) and passes paths through environment variables to mitigate potential injection risks from file names or instance IDs. - [EXTERNAL_DOWNLOADS]: Documentation in
references/cli-installation-guide.mdprovides links to official Huawei Cloud support pages and installation scripts for the KooCLI tool. These resources are part of the vendor's official infrastructure and are documented neutrally.
Audit Metadata