huawei-cloud-eip-cost-optimizer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The only suspicious URL is http://evil.com because it is an untrusted, non-HTTPS/placeholder domain (explicitly used in webhook validation tests and rejected by the scripts), while all other URLs are official Huawei Cloud docs/hosts or known webhook API endpoints (DingTalk/WeChat/Slack) and not suspicious download sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/eip_cost_report.sh and scripts/analyze_idle_eips.sh the runtime ingests hcloud CLI JSON responses (public IP fields like public_ip_address/id/status/create_time) from Huawei Cloud APIs and then renders them into text/HTML/JSON output, so an outsider-controlled asset could influence the free-text content processed by the workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill downloads and executes the hcloud installer at runtime (curl ... | bash and similar) from https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh and https://hwcloudcli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh, which fetches remote code that is executed during setup.