huawei-cloud-swr-image-management

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to extract the Docker "auth" field (a base64-encoded username:password token) from API responses and present that auth_value to the user, which requires the LLM to output a secret verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the runtime workflow runs Huawei Cloud SWR API read operations via hcloud (e.g., List/Show namespaces, repos, tags, quotas) and then parses/outputs the returned JSON, which can include outsider-authored free text fields like repository description.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation guide includes curl commands that download and execute remote install scripts/binaries (e.g., https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh), and the hcloud CLI fetched from these URLs is a mandatory runtime dependency for the skill.