Security audit
storage-obs-huawei-cloud-storage-query
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Huawei Cloud read-only query skill, but the published package appears to contain only documentation and no executable scripts, so it is low risk but likely nonfunctional as packaged.
Before installing, understand that the skill is meant to use Huawei Cloud access keys to query storage resources and may install Python dependencies if a complete package is provided. This submitted version appears to lack the referenced scripts and guides, so verify the package contents and only use credentials with the minimum read permissions needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.