huawei-cloud-network-query

Warn

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: During environment initialization, the script ensure_env.py may download the get-pip.py utility from official Huawei Cloud mirrors or the Python Packaging Authority (PyPA) domain to ensure package management tools are present.
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to manage its environment, executing system commands such as pip for dependency installation and platform-specific package managers including apt, yum, dnf, brew, and winget.
  • [PRIVILEGE_ESCALATION]: On Linux-based systems, the initialization script may invoke sudo to install the required Python 3 interpreter via the system package manager if it is missing from the host.
  • [DYNAMIC_EXECUTION]: The script ensure_env.py utilizes os.execv to restart the process within a local virtual environment Python interpreter. It also uses __import__ for runtime verification of required Huawei Cloud SDK modules.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 24, 2026, 01:14 PM