huawei-cloud-optv-solver-assistant
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Huawei Cloud KooCLI (hcloud) via Python's subprocess module to perform cloud operations such as file uploads, artifact management, and model service deployment.
- [EXTERNAL_DOWNLOADS]: The workflow downloads optimization artifacts (including documentation and Python scripts) and solution results from Huawei Cloud services (optverse.{region}.myhuaweicloud.com and OBS links), saving them to a local artifacts/ directory for review.
- [INDIRECT_PROMPT_INJECTION]: The skill processes remote artifacts generated by the decision engine, representing a potential indirect injection surface. 1. Ingestion points: Documented artifact retrieval via DownloadFile and external OBS result links in run_workflow.py. 2. Boundary markers: The agent is instructed to present artifacts to the user and obtain explicit confirmation before advancing to the next stage (modeling, data, solver). 3. Capability inventory: The skill has permissions to execute hcloud commands and perform network requests using the requests library. 4. Sanitization: Python scripts include a _redact function to mask IAM tokens and passwords, preventing their exposure in logs or command outputs.
Audit Metadata