codearts-pipeline

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements legitimate DevOps functionality for managing CI/CD pipelines on Huawei Cloud. All commands are standard administrative operations.
  • [COMMAND_EXECUTION]: The skill provides a shell script for the agent to extract a project-id from the local environment's git configuration. While this involves executing a command based on external data (git remote -v), the script uses a highly restrictive regular expression ([a-f0-9]{32}) that ensures only a specific hexadecimal string can be captured, effectively preventing command injection or the execution of unexpected payloads from the git metadata.
  • [EXTERNAL_DOWNLOADS]: The skill contains multiple links to official Huawei Cloud API documentation. These are well-known technical resources and are documented for reference purposes only, without involving automated downloads or remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 08:05 AM
Security Audit — agent-trust-hub — codearts-pipeline