huawei-cloud-kubectl-cce-installer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installer script downloads binaries and source code from external repositories.
- Fetches
kubectlpackages from Huawei Cloud's official Object Storage Service (OBS) atcce-north-4.obs.cn-north-4.myhuaweicloud.com. - Downloads the
kubectl-cceplugin from its repository on Gitee (gitee.com/pancake0001/kubectl-cce-plugin). - Falls back to official Kubernetes release endpoints (
dl.k8s.io) and source repositories (github.com/kubernetes/kubernetes.git) if standard downloads fail. - [COMMAND_EXECUTION]: The skill executes local shell commands to facilitate the installation process.
- Uses
curlfor network operations,tarfor extraction, andcp/chmodfor installing and setting permissions on binaries. - Invokes
gitandgoto compile binaries from source when pre-built assets are unavailable. - [DYNAMIC_EXECUTION]: The script uses an inline Python snippet to process XML metadata.
- In
install_latest_kubectl_from_obs, a Python script is executed via a heredoc to parse version listings from the Huawei Cloud OBS bucket and select the appropriate package key. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface by ingesting untrusted data that influences execution logic.
- Ingestion points: XML metadata retrieved from the remote OBS endpoint (
scripts/install_kubectl_cce.sh). - Boundary markers: None; the data is processed directly by the internal Python script.
- Capability inventory: The script has the capability to write files to system directories (
cp,chmod), execute remote commands (git,curl), and compile code (go build). - Sanitization: The script uses regular expressions and structured XML parsing to validate the input before selecting a download target.
Audit Metadata