huawei-cloud-billing-scout
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
hcloud BSScommands to retrieve billing facts from Huawei Cloud. These operations are explicitly restricted to read-only queries by the skill's principles and constraints. - [EXTERNAL_DOWNLOADS]: The installation documentation references official Huawei Cloud domains (
myhuaweicloud.com) for downloading the KooCLI tool and setup scripts. These are recognized as legitimate vendor-owned resources. - [REMOTE_CODE_EXECUTION]: The guide contains a standard installation pattern that downloads and executes a shell script (
curl | bash) from the vendor's official domain to set up the environment. - [PRIVILEGE_ESCALATION]: The installation and uninstallation procedures utilize
sudoto manage the lifecycle of thehcloudbinary in system directories. This usage is consistent with standard system administration practices for CLI tools.
Audit Metadata