Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently checks Huawei Cloud verification status and guides user-controlled face verification, with dependency and QR privacy precautions.
This is a community skill, not an official Huawei product. Configure hcloud credentials yourself. Use reviewed, locked dependencies and avoid unexpected runtime downloads. Render only URLs returned directly by hcloud, verify the hostname is auth.huaweicloud.com, and keep QR codes and terminal output private because they contain a one-time credential.
Without declared permissions the skill's intent is opaque and cannot be validated.
This is not an MCP server reference, but the documented npx tsx command can download and execute an unpinned package if a local installation is unavailable. Compromised dependency code would run in a context potentially containing Huawei Cloud credentials and the one-time verification URL, making supply-chain compromise consequential despite the intended read-only workflow. A pinned local dependency and committed lockfile could reduce this risk, but those files are not provided and the documented command does not require their use.
Although this command is not an MCP server invocation, npx tsx can download and execute an unpinned package when no local installation is available. A compromised package release could execute with the agent's privileges, potentially accessing the configured Huawei Cloud credentials and the one-time verification URL passed as an argument. The read-only API restrictions do not constrain malicious package code.
The executable shebang invokes an unversioned npm runner, not an MCP server. If a local tsx installation is unavailable, npx can resolve and download a registry version, introducing a supply-chain execution risk; compromised runner code could access the verification URL passed as an argument and other resources available to the process. A locked local installation would reduce this risk, but none is established by the supplied file.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
The caret range permits later compatible qrcode releases, introducing a low-severity supply-chain risk if installations resolve dependencies without an enforced lockfile. A compromised release could execute in the local agent environment; the skill's read-only cloud workflow would not constrain dependency code, although no compromised package or unsafe installation process is demonstrated here.
"node": ">=18"
},
"dependencies": {
"qrcode": "^1.5.4",
"tsx": "^4.23.12"
},
"devDependencies": {
The caret range allows tsx to change between installations unless a lockfile is enforced, creating a low-severity dependency-integrity weakness. Because tsx executes TypeScript tooling, a compromised update could affect the agent's execution environment, but this manifest alone provides no evidence of such a compromise.
},
"dependencies": {
"qrcode": "^1.5.4",
"tsx": "^4.23.12"
},
"devDependencies": {
"@types/node": "^26.2.0",
The @types/node version range can resolve to unreviewed updates when development dependencies are installed without an enforced lockfile. Its role as a development-only type package reduces direct runtime exposure, but development and build environments still face dependency supply-chain risk; no malicious behavior is shown.
"tsx": "^4.23.12"
},
"devDependencies": {
"@types/node": "^26.2.0",
"@types/qrcode": "^1.5.6"
}
}
The @types/qrcode caret range permits compatible updates that may not have been reviewed if installation does not enforce a lockfile. This is a low-severity supply-chain weakness with reduced exposure because the package is a development dependency, rather than evidence of an exploitable or malicious package.
},
"devDependencies": {
"@types/node": "^26.2.0",
"@types/qrcode": "^1.5.6"
}
}
No suspicious patterns detected.