skills/huaweicloud/huaweicloud-skills/huawei-cloud-modelarts-training-management/Gen Agent Trust Hub
huawei-cloud-modelarts-training-management
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download the hcloud CLI tool from Huawei Cloud's official support domain (
support.huaweicloud.com) within thereferences/cli-installation-guide.mdfile. As this resource is provided by the primary service vendor, the download is considered part of the intended functional setup. - [REMOTE_CODE_EXECUTION]: The installation guide in
references/cli-installation-guide.mdprovides a command pattern (curl -sSL ... | bash) that pipes remote content directly into the shell for installation. This pattern targets the vendor's official domain to facilitate the automated installation of the hcloud CLI. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, potentially untrusted sources which creates a surface for indirect instructions.
- Ingestion points: The agent reads training logs (
ShowTrainingJobLogsPreview), job events (ListTrainingJobEvents), and algorithm/job metadata (ListTrainingJobs,ListAlgorithms) as documented inreferences/cli-command-examples.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing the content of logs or event descriptions.
- Capability inventory: The skill possesses extensive capabilities, including creating, stopping, and deleting training jobs, algorithms, and models via the
hcloudCLI and thehuaweicloudsdkmodelartsPython SDK. - Sanitization: There are no explicit instructions for sanitizing or filtering input received from the ModelArts service before it is presented to or processed by the agent.
Audit Metadata