huawei-cloud-skill-tester
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The framework utilizes a series of bash scripts (Phases 0-7) and utility libraries to manage a testing pipeline, involving local file operations and execution of the Huawei Cloud CLI (KooCLI).
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation steps for the official Huawei Cloud CLI from a vendor-owned domain (huaweicloud.com). This is a legitimate resource for the skill's intended purpose.
- [REMOTE_CODE_EXECUTION]: As part of its testing functionality, the skill dynamically generates and executes Python SDK snippets and shell commands extracted from the skills under test. This is the primary functional purpose of the framework and is performed against the user's authenticated environment.
- [SAFE]: The skill manages cloud credentials by scanning for environment variables with specific vendor prefixes (HUAWEI_, HW_, HWC_) or prompting the user directly, which is standard practice for cloud management tools. It also includes cleanup routines to remove temporary files and test reports after execution.
Audit Metadata