huawei-cloud-flexus-l-server-hermes-deployment

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the yq utility from its official GitHub release (github.com/mikefarah/yq) to process YAML configuration files on the target instance during setup. GitHub is a well-known service and the utility is a standard tool for YAML manipulation.
  • [COMMAND_EXECUTION]: Orchestrates the deployment lifecycle through local shell commands and remote execution via the Huawei Cloud Cloud Operations Center (COC) service. This is the intended behavior for automating cloud resource provisioning and software configuration.
  • [CREDENTIALS_UNSAFE]: Handles Huawei Cloud credentials (AK/SK) required for cloud automation. The skill implements secure practices by recommending environment variables, providing masked input prompts for secrets, and explicitly warning against exposing credentials in conversation logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 09:10 AM
Security Audit — agent-trust-hub — huawei-cloud-flexus-l-server-hermes-deployment