Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly read-only, but it automatically installs/runs local setup code and uses Huawei Cloud credentials to access sensitive billing and infrastructure data with unsafe TLS handling.
Install only after reviewing the scripts and running them in an isolated environment with least-privilege, read-only Huawei Cloud credentials. Disable or fix SSL verification bypasses before using real account data, avoid automatic setup unless you accept network dependency installation, and treat printed billing/order/account identifiers as sensitive.
# 用 venv Python 重新执行当前脚本
print(f" 使用虚拟环境 Python: {venv_python}")
os.execv(venv_python, [venv_python] + sys.argv)
def info(msg):
print(f" {msg}")# ── 工具函数 ──────────────────────────────────────────────────────────
def run_cmd(cmd, timeout=None, **kwargs):
"""运行命令，返回 (returncode, stdout, stderr)
Args:65/65 vendors flagged this skill as clean.
Detected: suspicious.insecure_tls_verification