huawei-cloud-monitoring-query

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The environment preparation script scripts/ensure_env.py uses subprocess.run to perform administrative tasks such as creating virtual environments, installing packages via pip, and invoking system package managers (e.g., apt, yum, brew, winget) to ensure required tools are present.
  • [DYNAMIC_EXECUTION]: The skill employs os.execv in scripts/ensure_env.py to transition execution to a localized virtual environment's Python interpreter. Additionally, it uses __import__ to dynamically check for the availability of the Huawei Cloud SDK modules at runtime.
  • [EXTERNAL_DOWNLOADS]: If the pip utility is missing, scripts/ensure_env.py is designed to download get-pip.py from mirrors.huaweicloud.com (a vendor resource) or bootstrap.pypa.io (a well-known service). It also fetches official SDK dependencies from standard package registries.
  • [SAFE]: The skill scripts include logic to bypass SSL certificate verification for network requests. While this is a suboptimal security practice, it is implemented for compatibility with diverse environment configurations and is not indicative of malicious intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:52 PM