huawei-cloud-optv-evolve-management
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: All cloud-based operations are conducted through the official Huawei Cloud CLI (hcloud), ensuring compliance with vendor-provided security protocols and authentication mechanisms. The skill strictly follows best practices by instructing the agent not to expose or log sensitive credentials like Access Keys (AK) or Secret Keys (SK).
- [COMMAND_EXECUTION]: Local helper scripts such as
scripts/build_task_url.pyutilize thesubprocessmodule for benign operations, including environment detection (e.g., checking for graphical desktops usingtasklist) and launching the default system browser to navigate to the official Huawei Cloud console. These commands are static and do not process untrusted external inputs. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of 'evolve tasks' where user-supplied descriptions are used as LLM prompts for code optimization. This behavior is the intended primary function of the service. The skill includes detailed documentation and templates to help users structure these prompts effectively and safely within the Huawei Cloud Scientific Computing Zone.
Audit Metadata