huawei-cloud-monitoring-query
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The environment preparation script
scripts/ensure_env.pyusessubprocess.runto perform administrative tasks such as creating virtual environments, installing packages viapip, and invoking system package managers (e.g.,apt,yum,brew,winget) to ensure required tools are present. - [DYNAMIC_EXECUTION]: The skill employs
os.execvinscripts/ensure_env.pyto transition execution to a localized virtual environment's Python interpreter. Additionally, it uses__import__to dynamically check for the availability of the Huawei Cloud SDK modules at runtime. - [EXTERNAL_DOWNLOADS]: If the
piputility is missing,scripts/ensure_env.pyis designed to downloadget-pip.pyfrommirrors.huaweicloud.com(a vendor resource) orbootstrap.pypa.io(a well-known service). It also fetches official SDK dependencies from standard package registries. - [SAFE]: The skill scripts include logic to bypass SSL certificate verification for network requests. While this is a suboptimal security practice, it is implemented for compatibility with diverse environment configurations and is not indicative of malicious intent.
Audit Metadata