huawei-cloud-monitoring-query
Warn
Audited by Snyk on Jun 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The runtime ensure_env.py script may download and execute remote installer scripts (it calls urllib.request.urlretrieve and then runs get-pip.py from URLs such as https://bootstrap.pypa.io/get-pip.py or https://mirrors.huaweicloud.com/repository/pypi/simple/get-pip.py, and it runs pip to fetch packages from remote mirrors), so external content is fetched and executed at runtime.
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata