huawei-cloud-sms-migration-assistant

SUSPICIOUS: The skill is internally consistent with its stated purpose of end-to-end Huawei host migration, and the named cloud tooling appears to be official. However, the skill grants an AI agent broad real-world infrastructure control, requires Huawei AK/SK handling on source hosts, and performs privileged post-migration system modifications including password resets. Risk comes from high-impact automation and credential forwarding to SMS-Agent rather than clear malicious data exfiltration.

The visible fragment appears to be a cloud disk migration and boot-repair procedure, not malware. It makes destructive boot-file changes and performs cloud resource operations. The password-based root SSH check with host-key verification disabled, plus boot-mode assumptions, create operational and security risks; use verified host keys and confirm the target disk and boot mode before execution.