huawei-cloud-monitoring-query
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The environment setup scripts (
scripts/check_env.sh,scripts/ensure_env.py) useos.execv()andsubprocess.run()to manage the Python execution environment. Specifically, they create a local virtual environment and ensure all subsequent SDK calls are executed using the correct interpreter and isolated dependencies. - [EXTERNAL_DOWNLOADS]: To facilitate environment preparation, the skill fetches the
get-pip.pyutility from the vendor's official domain (huaweicloud.com) or the well-knownpypa.ioservice if a Python package manager is not found on the system. It also utilizes established mirror sites for efficient package installation. - [PRIVILEGE_ESCALATION]: The setup logic in
scripts/ensure_env.pycontains routines that may attempt to install system-level Python components usingsudoon Linux distributions if required dependencies are missing. This is a standard administrative step for initial tool configuration. - [EXTERNAL_DOWNLOADS]: Security configurations within
scripts/config.pyandscripts/ensure_env.pyare set to bypass SSL certificate verification. This is implemented to ensure connectivity in environments using corporate proxies, although it reduces protection against potential man-in-the-middle attacks.
Audit Metadata