huawei-cloud-gaussdb-instance-management
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata from cloud database instances and maintains significant operational capabilities, creating a surface for indirect prompt injection.
- Ingestion points: Metadata such as database names, instance IDs, and configuration details are ingested via
huawei_list_gaussdb_instancesandhuawei_list_gaussdb_databases. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present in the processing flow.
- Capability inventory: The skill includes commands to create, modify, and delete GaussDB instances and manage database permissions via the
gaussdb_cli.shwrapper. - Sanitization: No validation or sanitization is performed on the output returned from the
hcloudCLI before it is presented to the agent. - [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for downloading and executing software from remote vendor sources.
- Recommends downloading the KooCLI installation script from Huawei Cloud's official OBS storage:
https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh. - References a quality reporting SDK hosted on a public repository for optional integration.
- [COMMAND_EXECUTION]: Orchestrates cloud management operations by executing shell commands through the
scripts/gaussdb_cli.shwrapper script. - The script executes the
hcloudCLI with parameters provided by the agent and includes a manual confirmation step for mutating operations. - [DATA_EXFILTRATION]: The skill documents a quality reporting mechanism that transmits execution metadata to a remote vendor endpoint.
- Telemetry data including status codes and execution results are sent to
https://skillsapi.developer.myhuaweicloud.com/api/quality/report.
Audit Metadata