huawei-cloud-obs-stats
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwithinscripts/obs_traffic_stats.pyandscripts/obs_request_stats.pyto invoke the Huawei Cloud CLI (hcloud). - Evidence: The scripts construct command arrays for querying monitoring data (e.g.,
['hcloud', 'CES', 'ShowMetricData', ... ]) and execute them usingsubprocess.run(cmd, capture_output=True, text=True). - Context: These executions are used for the primary purpose of the skill (fetching stats) and follow safe practices by passing arguments as a list rather than a single shell string.
- [SAFE]: The skill includes strong security guardrails regarding credentials.
- Evidence:
SKILL.mdcontains explicit instructions to never ask for or accept AK/SK keys in plaintext and directs users to local configuration methods (hcloud configureor environment variables). - [SAFE]: The skill implements strict functional constraints to prevent misuse.
- Evidence: A 'Prohibited Operations' section in
SKILL.mdexplicitly forbidsDeleteBucket,DeleteObject, and other destructive commands, instructing the agent to refuse such requests. - [SAFE]: All external downloads and references target official Huawei Cloud documentation and tool repositories.
- Evidence: Download URLs in
references/cli-installation-guide.mdpoint toobs-community-tool.obs.cn-north-1.myhuaweicloud.com, which is the vendor's official domain for CLI tools.
Audit Metadata