huawei-cloud-billing-scout

• Outcome: Review
• Latest audit: Aug 3, 2026 · 9:32 AM UTC
• Version: 1.0.0

Overview

The skill is mostly a coherent read-only Huawei Cloud billing helper, but its agent-accessible install guide includes under-warned system installation and destructive local cleanup commands that need human review before use.

Install only if you are comfortable giving the skill read-only access to Huawei Cloud billing data through your existing hcloud profile. Review any install, update, language-setting, uninstall, or cleanup command manually first; do not run the non-interactive installer or rm -rf ~/.hcloud unless you understand the credential/profile impact and have backups where needed.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match

Findings (7)

Context-Inappropriate Capability

Medium

• Confidence: 86% confidence
• Finding: The guide includes KooCLI usage for general service management, such as ECS operations, which exceeds the skill's declared Huawei Cloud billing/BSS-only scope. In an agent setting, this scope expansion can cause the skill to assist with unrelated infrastructure actions and weaken safety boundaries intended to restrict the tool to read-oriented billing workflows.

Context-Inappropriate Capability

Medium

• Confidence: 94% confidence
• Finding: The file documents uninstall and deletion procedures even though the skill metadata says it refuses delete actions. This mismatch creates a policy bypass risk where an agent could cite the guide to justify destructive local actions, including removal of CLI binaries and configuration.

Natural-Language Policy Violations

Medium

• Confidence: 88% confidence
• Finding: The skill directs `hcloud configure set --cli-lang=cn`, which mutates the user's CLI configuration without explicit opt-in and is not strictly necessary for many read-only billing tasks. Even though this is not a destructive action, it changes environment state globally and could confuse users, affect other workflows, or violate expectations for read-only behavior.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The uninstall commands remove local CLI state, including the ~/.hcloud directory, without clearly warning that credentials, profiles, and cached configuration may be deleted. An agent surfacing these commands to users could cause irreversible local credential loss or operational disruption.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The guide instructs users to download and immediately execute a remote shell script via curl and bash, including a non-interactive mode, without any trust, integrity, or review warning. This is dangerous because a compromised hosting endpoint, MITM in a weak environment, or accidental URL substitution could lead to arbitrary code execution on the user's machine.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:
# 1. Delete hcloud.exe file

• Confidence: 96% confidence
• Finding: The command rm -rf ~/.hcloud/ is a destructive filesystem operation that can delete local CLI configuration, cached data, and potentially credentials. In an AI skill context, presenting or automating such a command is especially risky because it can turn a documentation snippet into a user-triggered destructive action with little friction.

YARA rule 'agent_skill_destructive_autonomous_actions': Autonomous destructive filesystem, shell history, or repository actions in AI agent skills [agent_skills]

High

• Category: YARA Match

Content

# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:
# 1. Delete hcloud.exe file

• Confidence: 91% confidence
• Finding: The YARA hit is justified because the guide contains autonomous-style destructive shell patterns, including non-interactive installation and recursive deletion of the .hcloud directory. In an agent skill, this combination is more dangerous than ordinary docs because it may normalize unattended execution and destructive cleanup in a context that should be tightly scoped and non-destructive.

Static analysis

Detected: suspicious.destructive_delete_command

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

• Code: suspicious.destructive_delete_command
• Location: references/cli-installation-guide.md:212