huawei-cloud-eip-cost-optimizer
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official hcloud CLI installer from Huawei Cloud infrastructure (hwcloudcli.obs.cn-north-1.myhuaweicloud.com and hwcloudcli.obs.cn-north-4.myhuaweicloud.com) during setup.
- [REMOTE_CODE_EXECUTION]: The skill implements a one-click installation pattern in SKILL.md and scripts/check_env.sh that pipes a remote installer script to bash for setting up the cloud CLI environment.
- [COMMAND_EXECUTION]: Core logic is orchestrated via shell scripts that execute commands for resource querying (hcloud), data processing (jq, bc), and scheduled task management (crontab).
- [DATA_EXFILTRATION]: Automated monitoring alerts can be transmitted to external webhooks. The skill mitigates exfiltration risk by enforcing an HTTPS domain whitelist restricted to DingTalk, WeChat, and Slack APIs.
- [SAFE]: Authentication instructions emphasize the use of environment variables or native configuration files over command-line arguments to prevent credential exposure in process metadata.
Audit Metadata