huawei-cloud-swr-image-automation
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Huawei Cloud KooCLI (hcloud) installation script and platform-specific binaries from the vendor's official Object Storage Service (OBS) at
*.myhuaweicloud.comdomains.- [COMMAND_EXECUTION]: Executes the downloaded installation script (hcloud_install.sh) using the shell to automate CLI setup.- [PRIVILEGE_ESCALATION]: Usessudoduring the installation process to move thehcloudbinary to/usr/local/bin/, which is standard procedure for CLI tool installation.- [INDIRECT_PROMPT_INJECTION]: Processes data from Huawei Cloud SWR (such as repository names, image tags, and trigger configurations). While these fields are user-controlled in the cloud console and could theoretically contain malicious instructions, the skill implements a mandatory human-in-the-loop confirmation step for all modifying actions, mitigating the risk of unintended execution.
Audit Metadata