huawei-cloud-iam-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: scripts/ensure_env.py downloads get-pip.py from public URLs (e.g., https://bootstrap.pypa.io/get-pip.py) via urllib.request.urlretrieve, and the downloaded content is executed by run_cmd([sys.executable, get_pip_path]), so outsider-authored free text/code can enter the runtime context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The environment script ensure_env.py (invoked at runtime by the skill) downloads and executes remote installer code (get-pip.py) from URLs such as https://mirrors.huaweicloud.com/repository/pypi/simple/get-pip.py and https://bootstrap.pypa.io/get-pip.py and also contacts PyPI mirrors like https://repo.huaweicloud.com/repository/pypi/simple (used as pip index) to install required dependencies, so remote content is fetched and executed as a required runtime dependency.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)