huawei-cloud-gaussdb-instance-management
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Huawei Cloud CLI (KooCLI) installer from a vendor-controlled Object Storage Service (OBS) domain (
myhuaweicloud.com). - [REMOTE_CODE_EXECUTION]: The installation guide instructs the user to execute the downloaded setup script using the system shell (
bash), which is a standard procedure for installing the hcloud CLI tool. - [COMMAND_EXECUTION]: A utility script (
gaussdb_cli.sh) is provided to wrap and executehcloudCLI commands. The script includes a confirmation prompt for mutating operations (R2/R1 tiers) to prevent accidental execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from cloud API responses (e.g., instance status, node topology) and possesses the capability to modify or delete resources. This creates an indirect prompt injection surface; however, the risk is mitigated by the skill's reliance on structured JSON output and the requirement for user confirmation on high-risk actions.
Audit Metadata