huawei-cloud-flexus-l-server-ops
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Huawei Cloud SDK dependencies from the vendor's repository (
repo.huaweicloud.com). This is a legitimate operation for a cloud management tool. - [COMMAND_EXECUTION]: The skill uses local Python scripts to facilitate API calls to Huawei Cloud services. The execution flow is well-defined and includes parameter validation (e.g., password complexity and hostname regex checks).
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe handling of sensitive credentials. It explicitly instructs the agent to use environment variables (
HW_ACCESS_KEY,HW_SECRET_KEY,HW_SECURITY_TOKEN) and includes multiple warnings to never expose or print these values in the conversation. - [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected. The skill includes safety features such as double-confirmation requirements for stopping or rebooting instances and validation of instance types before performing operations.
Audit Metadata