huawei-cloud-evs-disk-create
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an official Huawei Cloud domain to download the KooCLI installation script. As this is a vendor-owned resource, it is a legitimate dependency.\n- [REMOTE_CODE_EXECUTION]: The installation guide for KooCLI suggests using a curl piped to bash to install the tool from a vendor-controlled source.\n- [COMMAND_EXECUTION]: The skill executes Huawei Cloud CLI commands and includes a shell script for batch disk creation which dynamically executes commands.\n- [PRIVILEGE_ESCALATION]: Documentation mentions switching to the root user for installation if permission errors occur.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from cloud API outputs.\n
- Ingestion points: Output from hcloud EVS CinderListAvailabilityZones and hcloud EVS ListVolumes.\n
- Boundary markers: None.\n
- Capability inventory: Cloud resource creation, network access, and local script execution.\n
- Sanitization: No explicit validation of tool output.
Audit Metadata