huawei-cloud-monitoring-query

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The environment setup scripts (scripts/check_env.sh, scripts/ensure_env.py) use os.execv() and subprocess.run() to manage the Python execution environment. Specifically, they create a local virtual environment and ensure all subsequent SDK calls are executed using the correct interpreter and isolated dependencies.
  • [EXTERNAL_DOWNLOADS]: To facilitate environment preparation, the skill fetches the get-pip.py utility from the vendor's official domain (huaweicloud.com) or the well-known pypa.io service if a Python package manager is not found on the system. It also utilizes established mirror sites for efficient package installation.
  • [PRIVILEGE_ESCALATION]: The setup logic in scripts/ensure_env.py contains routines that may attempt to install system-level Python components using sudo on Linux distributions if required dependencies are missing. This is a standard administrative step for initial tool configuration.
  • [EXTERNAL_DOWNLOADS]: Security configurations within scripts/config.py and scripts/ensure_env.py are set to bypass SSL certificate verification. This is implemented to ensure connectivity in environments using corporate proxies, although it reduces protection against potential man-in-the-middle attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 09:10 AM
Security Audit — agent-trust-hub — huawei-cloud-monitoring-query