huawei-cloud-rds-failover
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill scripts utilize the
subprocessmodule to execute the officialhcloudCLI. These executions are performed by passing arguments as lists, which effectively prevents shell command injection. The commands are limited to legitimate resource management actions. - [SAFE]: The skill retrieves metadata and logs from Huawei Cloud APIs to generate reports. The application consistently uses
html.escapeto sanitize this external data before embedding it into HTML reports, protecting against stored Cross-Site Scripting (XSS) attacks. - [PRIVILEGE_ESCALATION]: Reference documentation includes instructions for the manual setup of the
hcloudCLI, involving standard system administration steps like changing file permissions and relocating binaries. These steps are presented as guidance for the user and are not performed automatically by the skill's code.
Audit Metadata