huawei-cloud-obs-website-host
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard CLI tools (
hcloud,obsutil,dig) for infrastructure management and DNS verification. These operations are scoped to the intended purpose of configuring cloud resources and verifying network resolution.- [EXTERNAL_DOWNLOADS]: The skill downloads official CLI tools and SDKs from Huawei Cloud's infrastructure (obs-community.obs.cn-north-1.myhuaweicloud.com,ap-southeast-3-hwcloudcli.obs.ap-southeast-3.myhuaweicloud.com). These are trusted vendor sources for this skill's context.- [DATA_EXPOSURE]: The skill includes logic to check for the presence of credentials in~/.obsutilconfigwithout printing or exfiltrating the secret values. It specifically instructs the agent to avoidcatorgrepcommands that would leak keys into the model context.- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided inputs likebucket_nameandcustom_domain. It mitigates risks by passing these through validated scripts (scripts/set_obs_website_sdk.py,scripts/verify_obs_website.py) rather than interpolating them directly into sensitive shell commands.- [SAFE]: The implementation demonstrates a security-first approach by requiring custom domains to comply with preview policies and providing detailed remediation guidance for IAM permission failures.
Audit Metadata