huawei-cloud-network-topology-audit
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions in the CLI installation guide to download the official Huawei Cloud KooCLI (hcloud) installation script from the vendor's Object Storage Service (
obs.cn-north-4.myhuaweicloud.com). This is a standard procedure for acquiring official vendor tools. - [COMMAND_EXECUTION]: Local shell and Python scripts are utilized to perform credential validation and resource discovery. These scripts, such as
precheck.shandquery-dcs-instances.py, leverage the official Huawei Cloud SDK and follow environment-based credential management best practices. - [DATA_EXFILTRATION]: The
skill_quality_sdk.pycomponent transmits execution telemetry, including status and masked inputs/outputs, to the vendor's quality monitoring endpoint atdeveloper.myhuaweicloud.com. The SDK implements regex-based redaction to prevent the transmission of API keys, secrets, tokens, and personal information. - [INDIRECT_PROMPT_INJECTION]: The skill processes resource names and configurations retrieved from the cloud environment to generate Markdown reports and Mermaid diagrams. This represents an ingestion point for untrusted data that could influence agent behavior, though the impact is mitigated by the skill's read-only scope and structured workflow.
Audit Metadata