Security audit
Security checks across malware telemetry and agentic risk
This skill is mostly a disclosed Huawei GES graph-administration tool, but it handles cloud credentials and destructive graph or storage actions with weak transport security and limited built-in safeguards.
Install only if you intend to let the agent operate a live Huawei Cloud GES graph. Use least-privilege credentials, avoid production credentials unless necessary, review any import/export or deletion request carefully, and prefer a version that enforces TLS verification and confirmation gates in code before using it on sensitive data.
}
}
resp = requests.post(url, headers=headers, json=data, timeout=30, verify=False)
if resp.status_code not in [200, 201]:
raise Exception(f"密码获取Token失败: {resp.status_code}, {resp.text[:200]}")edge_path="obs://bucket/edge"
)
# Export graph data (access_key/secret_key are read from .env automatically)
job_id = skill.client.export_graph(
export_path="obs://bucket/export",
vertex_set_name="set_vertex",}
}
resp = requests.post(url, headers=headers, json=data, timeout=30, verify=False)
if resp.status_code not in [200, 201]:
raise Exception(f"密码获取Token失败: {resp.status_code}, {resp.text[:200]}")'X-Identity-Sign': authorization_header
}
resp = requests.post(url, data=Body, headers=headers, timeout=30, verify=False)
if resp.status_code not in [200, 201]:
raise Exception(f"AKSK获取Token失败: {resp.status_code}, {resp.text[:200]}")url=url,
headers=request_headers,
data=body,
verify=False
)
if response.status_code >= 400:url = f"{self.base_url}{path}"
headers = self._get_headers()
resp = requests.request(method, url, headers=headers, **kwargs, verify=False)
if resp.status_code >= 400:
raise Exception(f"API请求失败 [{resp.status_code}]: {resp.text}")VirusTotal findings are pending for this skill version.
Detected: suspicious.insecure_tls_verification