huawei-cloud-gaussdb-instance-management

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata from cloud database instances and maintains significant operational capabilities, creating a surface for indirect prompt injection.
  • Ingestion points: Metadata such as database names, instance IDs, and configuration details are ingested via huawei_list_gaussdb_instances and huawei_list_gaussdb_databases.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present in the processing flow.
  • Capability inventory: The skill includes commands to create, modify, and delete GaussDB instances and manage database permissions via the gaussdb_cli.sh wrapper.
  • Sanitization: No validation or sanitization is performed on the output returned from the hcloud CLI before it is presented to the agent.
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for downloading and executing software from remote vendor sources.
  • Recommends downloading the KooCLI installation script from Huawei Cloud's official OBS storage: https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh.
  • References a quality reporting SDK hosted on a public repository for optional integration.
  • [COMMAND_EXECUTION]: Orchestrates cloud management operations by executing shell commands through the scripts/gaussdb_cli.sh wrapper script.
  • The script executes the hcloud CLI with parameters provided by the agent and includes a manual confirmation step for mutating operations.
  • [DATA_EXFILTRATION]: The skill documents a quality reporting mechanism that transmits execution metadata to a remote vendor endpoint.
  • Telemetry data including status codes and execution results are sent to https://skillsapi.developer.myhuaweicloud.com/api/quality/report.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 06:15 PM