huawei-cloud-flexus-l-server-flexusagent-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes shell scripts downloaded from external Huawei Cloud Object Storage (OBS) endpoints (documentation-samples.obs.cn-north-4.myhuaweicloud.com and flexus-config-cn-north-4-product.obs.cn-north-4.myhuaweicloud.com) via curl ... | bash, which constitutes a high-risk unverifiable remote operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a cloud service deployment tool (Huawei Cloud Flexus L instance) that incurs cloud infrastructure costs via prepaid billing ("Deployment operations involve actual costs", SKILL.md:133; "Deploying Flexus L instance will incur costs", SKILL.md:151). This constitutes a direct financial operation (purchasing cloud server resources). Authentication is handled via Huawei Cloud AK/SK credentials and IAM policies (SKILL.md:68-71, 100-105) which serve as qualifying independent service access controls.