huawei-cloud-ecs-shutdown-experiment

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run to call the Huawei Cloud CLI (hcloud / KooCLI) across multiple scripts, including discover_ecs.py, execute_experiment.py, and monitor_instances.py. This is the intended mechanism for the skill's cloud management functions. Environment variable whitelisting is used to ensure only necessary variables are passed to these child processes.
  • [INDIRECT_PROMPT_INJECTION]: The log analysis functionality in scripts/analyze_logs.py represents an indirect prompt injection surface as it ingests external data.
  • Ingestion points: scripts/collect_logs.py fetches application log messages from the Huawei Cloud LTS (Log Tank Service).
  • Boundary markers: Log data is interpolated into Markdown reports without specific boundary delimiters or "ignore instructions" warnings.
  • Capability inventory: The skill can write files to the local disk and execute ECS shutdown/start commands via the Huawei Cloud API.
  • Sanitization: Log messages are truncated for display but are not explicitly sanitized for potential Markdown or prompt control character injection.
  • [DYNAMIC_EXECUTION]: The scripts/deploy_experiment.sh script dynamically generates an emergency rollback_experiment.sh script at runtime. The generation process uses shell-quoting (printf %q) and passes paths through environment variables to mitigate potential injection risks from file names or instance IDs.
  • [EXTERNAL_DOWNLOADS]: Documentation in references/cli-installation-guide.md provides links to official Huawei Cloud support pages and installation scripts for the KooCLI tool. These resources are part of the vendor's official infrastructure and are documented neutrally.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 08:02 AM