huawei-cloud-obs-upload
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the hcloud (KooCLI) installer and obsutil binaries from official vendor-owned domains: cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com and obs-community.obs.cn-north-1.myhuaweicloud.com. This is consistent with the official tool distribution for the vendor.
- [REMOTE_CODE_EXECUTION]: The installation guide includes a command to pipe a shell script directly into bash (curl ...hcloud_install.sh | bash). This is performed using official installation scripts provided by the vendor infrastructure.
- [COMMAND_EXECUTION]: The skill executes various shell commands and utilizes the hcloud and obsutil CLIs to manage storage operations, query monitoring metrics via CES, and configure local environment settings.
- [PERSISTENCE]: To support the scheduled upload feature, the skill modifies the user's crontab to execute generated shell scripts at regular intervals. This persistence is a documented core feature of the skill intended for synchronization tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data such as local file paths and bucket names which are interpolated into shell commands.
- Ingestion points: User-provided local directory paths and bucket names in references/task-upload-file.md and references/task-scheduled-upload.md.
- Boundary markers: The instructions do not define strict boundary markers or sanitization logic for user-supplied paths in the shell templates.
- Capability inventory: The skill has access to shell execution for obsutil and crontab operations in references/task-scheduled-upload.md.
- Sanitization: Relies on standard shell parameter passing; no specific validation or escaping of path strings is detailed.
Audit Metadata