huawei-cloud-obs-website-host

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard CLI tools (hcloud, obsutil, dig) for infrastructure management and DNS verification. These operations are scoped to the intended purpose of configuring cloud resources and verifying network resolution.- [EXTERNAL_DOWNLOADS]: The skill downloads official CLI tools and SDKs from Huawei Cloud's infrastructure (obs-community.obs.cn-north-1.myhuaweicloud.com, ap-southeast-3-hwcloudcli.obs.ap-southeast-3.myhuaweicloud.com). These are trusted vendor sources for this skill's context.- [DATA_EXPOSURE]: The skill includes logic to check for the presence of credentials in ~/.obsutilconfig without printing or exfiltrating the secret values. It specifically instructs the agent to avoid cat or grep commands that would leak keys into the model context.- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided inputs like bucket_name and custom_domain. It mitigates risks by passing these through validated scripts (scripts/set_obs_website_sdk.py, scripts/verify_obs_website.py) rather than interpolating them directly into sensitive shell commands.- [SAFE]: The implementation demonstrates a security-first approach by requiring custom domains to comply with preview policies and providing detailed remediation guidance for IAM permission failures.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 12:48 PM
Security Audit — agent-trust-hub — huawei-cloud-obs-website-host