skills/huaweicloud/huaweicloud-skills/huawei-cloud-modelarts-resource-pool-management/Gen Agent Trust Hub
huawei-cloud-modelarts-resource-pool-management
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users and provides scripts to download the official Huawei Cloud CLI (KooCLI) from a verified vendor domain (myhuaweicloud.com). This is the expected and secure method for setting up the management tool.
- [REMOTE_CODE_EXECUTION]: Installation steps include fetching and executing a bash script from the official Huawei Cloud OBS storage. This is considered safe as it originates from a trusted vendor domain.
- [COMMAND_EXECUTION]: The skill uses the
hcloudcommand-line tool to perform operations on the cloud platform. It correctly implements warnings to prevent the agent from handling or exposing sensitive AK/SK credentials. - [DYNAMIC_EXECUTION]: Included bash scripts use
python3to securely parse JSON responses from CLI tools. The scripts use static code for parsing and do not evaluate untrusted input. - [SAFE]: The skill demonstrates strong security boundaries, explicitly prohibiting access to secret keys and requiring user confirmation for all modifications to cloud resources.
Audit Metadata