skills/huaweicloud/huaweicloud-skills/huawei-cloud-mrs-hdfs-performance-issue-analysis/Gen Agent Trust Hub
huawei-cloud-mrs-hdfs-performance-issue-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a comprehensive list of read-only diagnostic commands for the user to manually execute on the cluster nodes, such as monitoring disk I/O (
iostat), checking CPU usage (top), and searching for slow RPC entries in logs usinggrep. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied log files (omaplugin, namenode, and audit logs). The implementation includes strict regular expression validation to extract metrics and ensures that data is handled safely when generating interactive HTML reports, using
.textContentin the embedded JavaScript to prevent Cross-Site Scripting (XSS). - [EXTERNAL_DOWNLOADS]: The skill references official Huawei Cloud MRS documentation and IAM policy guidelines. These references are consistent with the verified author ('huaweicloud') and do not involve untrusted third-party sources.
- [SAFE]: The built-in Python analyzer script (
scripts/hdfs_perf_analyze.py) relies exclusively on the Python standard library. It implements robust path validation to prevent Zip Slip vulnerabilities during log archive extraction, ensuring that files are not extracted outside the intended target directory.
Audit Metadata