huawei-cloud-kubectl-cce-installer

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The installer script downloads binaries and source code from external repositories.
  • Fetches kubectl packages from Huawei Cloud's official Object Storage Service (OBS) at cce-north-4.obs.cn-north-4.myhuaweicloud.com.
  • Downloads the kubectl-cce plugin from its repository on Gitee (gitee.com/pancake0001/kubectl-cce-plugin).
  • Falls back to official Kubernetes release endpoints (dl.k8s.io) and source repositories (github.com/kubernetes/kubernetes.git) if standard downloads fail.
  • [COMMAND_EXECUTION]: The skill executes local shell commands to facilitate the installation process.
  • Uses curl for network operations, tar for extraction, and cp/chmod for installing and setting permissions on binaries.
  • Invokes git and go to compile binaries from source when pre-built assets are unavailable.
  • [DYNAMIC_EXECUTION]: The script uses an inline Python snippet to process XML metadata.
  • In install_latest_kubectl_from_obs, a Python script is executed via a heredoc to parse version listings from the Huawei Cloud OBS bucket and select the appropriate package key.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface by ingesting untrusted data that influences execution logic.
  • Ingestion points: XML metadata retrieved from the remote OBS endpoint (scripts/install_kubectl_cce.sh).
  • Boundary markers: None; the data is processed directly by the internal Python script.
  • Capability inventory: The script has the capability to write files to system directories (cp, chmod), execute remote commands (git, curl), and compile code (go build).
  • Sanitization: The script uses regular expressions and structured XML parsing to validate the input before selecting a download target.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 08:17 PM