huawei-cloud-kubectl-cce-installer
Warn
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bundled shell script (
scripts/install_kubectl_cce.sh) to perform environment checks and binary installations. - [EXTERNAL_DOWNLOADS]: The installer fetches assets from multiple external endpoints:
gitee.com/pancake0001/kubectl-cce-plugin(Plugin binary and source code)cce-north-4.obs.cn-north-4.myhuaweicloud.com(Kubectl binary package)dl.k8s.io(Official Kubernetes release site)github.com/kubernetes/kubernetes.git(Kubernetes source code for fallback builds)- [REMOTE_CODE_EXECUTION]: The script downloads binaries, marks them as executable (
chmod +x), and moves them to system paths. Sourcing the core plugin from a personal Gitee account (pancake0001) instead of a verified organization account introduces a supply chain vulnerability. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via the following surface:
- Ingestion points: Reads XML directory listings from Huawei Cloud OBS (
obs-kubectl-list.xml) and version strings fromdl.k8s.ioto determine download paths. - Boundary markers: None used when processing remote content to separate metadata from executable parameters.
- Capability inventory: Performs file writes, permission changes, and command execution based on the processed data.
- Sanitization: Uses Python regex parsing to extract filenames but lacks cryptographic integrity validation (e.g., checksums) for the downloaded content.
Audit Metadata