huawei-cloud-kubectl-cce-installer

SUSPICIOUS. The skill’s resource-query purpose is legitimate and tightly scoped, but its core dependency chain is not fully trustworthy: `kubectl` comes from an official Kubernetes source, while `kubectl-cce` is fetched or built from a non-official Gitee project and then used with Huawei Cloud credentials. That provenance mismatch, plus source-build fallback and optional insecure-TLS retry, makes the skill high risk even without clear evidence of deliberate malware.