huawei-cloud-maas-tokens-usage
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by reading Huawei Cloud Access Keys (AK/SK) from environment variables or a local file provided by the user. This ensures that sensitive credentials stay within the Python process memory and are not leaked into shell history, process lists (via command-line arguments), or the conversation history.
- [SAFE]: All network operations are directed to official, vendor-controlled API endpoints (
modelarts.{region}.myhuaweicloud.comandiam.{region}.myhuaweicloud.com) for authentication and statistics retrieval. This represents standard and expected functionality for a cloud monitoring tool. - [SAFE]: External dependencies are restricted to the official Huawei Cloud SDK (
huaweicloudsdkcore) and the standardrequestslibrary. The use of the vendor's signing library for HMAC-SHA256 authentication follows industry-standard security protocols for cloud service interaction. - [SAFE]: Although the skill ingests data from external API responses, the processed information is only used to generate a formatted monitoring report. There are no capabilities for executing commands or writing files based on the external data, effectively mitigating risks associated with indirect prompt injection.
Audit Metadata