huawei-cloud-obs-website-host
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official Huawei Cloud utility tools, including the
hcloudCLI andobsutil, from the vendor's authorized Object Storage Service domains (e.g.,*.myhuaweicloud.com). These downloads are necessary for the skill's documented functionality. - [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the
hcloudCLI on Linux by downloading and executing a shell script directly from a Huawei Cloud endpoint. This is a standard installation procedure for the vendor's official command-line tools. - [COMMAND_EXECUTION]: The skill orchestrates cloud configuration tasks by executing several commands, including
pip install,hcloud,obsutil, and the provided Python scripts (set_obs_website_sdk.pyandverify_obs_website.py). These operations are used to manage bucket settings, register custom domains, and update DNS records. - [DATA_EXFILTRATION]: Bundled scripts retrieve authentication credentials from the standard
~/.obsutilconfigfile. This access is required to authenticate requests to Huawei Cloud APIs. The skill includes specific defensive logic and instructions to ensure that these credentials are never printed to the console or leaked during operation.
Audit Metadata