huawei-cloud-ecs-sqlbot-deploy
Fail
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The automated security alert for
http://X.X.X.X:8000is a false positive. This URL pattern is used throughout the skill as a template placeholder for the public IP address of the server after it has been successfully deployed. - [EXTERNAL_DOWNLOADS]: The skill fetches necessary components from official Huawei Cloud infrastructure:
- It downloads required Python SDKs from the Huawei Cloud PyPI mirror at
https://repo.huaweicloud.com/repository/pypi/simple. - It retrieves an installation shell script for the SQLBot application from an official Huawei Cloud OBS (Object Storage Service) bucket.
- [COMMAND_EXECUTION]: The
scripts/utils.pymodule usessubprocess.runfor administrative tasks: - It invokes
pipto install missing dependencies during the environment check phase. - It calls the
openclawcommand-line tool to send real-time deployment status updates and success notifications to a user-specified Feishu ID. - [REMOTE_CODE_EXECUTION]: The skill utilizes Huawei Cloud's Cloud Operations Center (COC) to execute scripts on the created Elastic Cloud Server (ECS) instances. This mechanism is used to perform the actual installation of the SQLBot software on the remote server as intended by the skill's design.
- [SAFE]: The skill disables SSL verification warnings using
urllib3.disable_warnings(). While this is a best-practice violation, it is commonly used in deployment scripts to handle diverse network configurations and does not indicate malicious intent in this context.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata