huawei-cloud-icp-preapproval-check
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Huawei Cloud support documentation (
support.huaweicloud.com) and CDN domains (res-static.hc-cdn.cn) for commitment letter templates. These are trusted vendor resources used for reference and do not involve runtime downloads of executable code. - [COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts (
check_preapproval.pyandocr_license.py) using thepythoninterpreter. These scripts handle the core logic of keyword matching and OCR fallback. The scripts themselves are included in the package and do not perform any dangerous system operations or network requests. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (company names and business scopes) by passing them as command-line arguments to the analysis script. However, the script performs deterministic keyword matching using regular expressions and string normalization, and it does not re-interpolate this data into further LLM prompts, mitigating the risk of injection affecting the agent's logic.
Audit Metadata