huawei-cloud-modelarts-training-management

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to download the hcloud CLI tool from Huawei Cloud's official support domain (support.huaweicloud.com) within the references/cli-installation-guide.md file. As this resource is provided by the primary service vendor, the download is considered part of the intended functional setup.
  • [REMOTE_CODE_EXECUTION]: The installation guide in references/cli-installation-guide.md provides a command pattern (curl -sSL ... | bash) that pipes remote content directly into the shell for installation. This pattern targets the vendor's official domain to facilitate the automated installation of the hcloud CLI.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, potentially untrusted sources which creates a surface for indirect instructions.
  • Ingestion points: The agent reads training logs (ShowTrainingJobLogsPreview), job events (ListTrainingJobEvents), and algorithm/job metadata (ListTrainingJobs, ListAlgorithms) as documented in references/cli-command-examples.md.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing the content of logs or event descriptions.
  • Capability inventory: The skill possesses extensive capabilities, including creating, stopping, and deleting training jobs, algorithms, and models via the hcloud CLI and the huaweicloudsdkmodelarts Python SDK.
  • Sanitization: There are no explicit instructions for sanitizing or filtering input received from the ModelArts service before it is presented to or processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 07:05 AM