Security audit
huawei-cloud-asm-fuzzy-list
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed, read-only Huawei Cloud ASM mesh-listing helper that uses environment credentials only to call the expected list API.
Install only in an environment where you are comfortable granting read-only Huawei Cloud ASM list access. Use least-privilege IAM such as asm:mesh:list, keep AK/SK in environment variables, and expect the skill to return mesh names, IDs, phases, and creation timestamps for the selected project/region.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.