huawei-cloud-swr-image-governance
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the
hcloudCLI to perform various management operations on the SWR service.\n- [EXTERNAL_DOWNLOADS]: Fetches the official KooCLI installation script from the vendor's domain athttps://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh.\n- [REMOTE_CODE_EXECUTION]: Executes the downloaded shell script (hcloud_install.sh) viabashto facilitate CLI installation.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests data from external CLI outputs to perform high-privilege operations.\n - Ingestion points: Data enters the context via CLI outputs from
ShowNamespaceAuth,ListRetentions,ListRepoDomains, andShowShareFeatureGates(documented across varioustask-*.mdfiles).\n - Boundary markers: Present; the skill implements a mandatory workflow requiring explicit user confirmation for all write operations (
Create,Update,Delete) to prevent unauthorized actions.\n - Capability inventory: Includes capabilities to delete image tags (retention rules), modify namespace and repository access permissions, and manage shared domains.\n
- Sanitization: Absent; the instructions do not specify validation or sanitization of the CLI output data before interpolation.
Audit Metadata