huawei-cloud-cc-instance-query

• Outcome: Pass
• Latest audit: Sep 3, 2026 · 1:10 PM UTC
• Version: 1.0.0

Overview

This skill is a read-only Huawei Cloud Cloud Connect query helper, with some setup and scoping hygiene issues users should notice before use.

Install only if you intend to let the agent run read-only Huawei Cloud Cloud Connect queries for your account. Use a least-privilege Huawei IAM identity with CC ReadOnlyAccess, specify the domain_id explicitly, protect AK/SK credentials, and review the hcloud installer script before running it. Treat returned topology, route, and cross-account authorisation data as sensitive account information.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (5)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 91% confidence
• Finding: The code is broadly consistent with the declared read-only Cloud Connect inspection purpose: it only runs list/show CC commands and does not create or modify resources. It covers the declared resource types of cloud connections, bandwidth packages, inter-region bandwidths, network instances, and routes. However, the description also explicitly claims support for cross-account authorisations (granted and received), and no such commands or logic appear in the provided code chunk. This is a material gap in declared versus actual behavior for the supplied code.

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger list includes broad terms like 'CC', 'permission', and 'authorisation' that can match unrelated user requests and invoke the skill outside its intended Huawei Cloud CC context. Over-broad activation can cause unintended cloud account enumeration or disclosure of network topology and cross-account relationship metadata when a user meant something else.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The guide instructs users to download and immediately execute a remote shell script with curl and bash, but it does not warn that this runs arbitrary code from the network with the user's privileges. If the hosting location, transport path, or installer content is compromised, users could execute malicious code during setup.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The authentication section tells users to configure AK/SK credentials and set environment variables, but it does not warn that these are sensitive secrets that can leak through shell history, process inspection, screenshots, logs, or shared terminal environments. In a cloud-administration skill, exposed credentials could enable unauthorized access to Huawei Cloud resources well beyond this read-only use case.

Excessive Permissions

Low

• Category: Privilege Escalation

Content

This is the **grantee's** view — the calling account owns the cloud connections and can load network instances owned by other accounts (identified by `instance_domain_id`).

**List permissions:**
```bash
hcloud CC ListPermissions --cli-region=cn-north-4 --domain_id=<account_id> [--limit=10] [--cloud_connection_id.1=<cc_id>] [--instance_id.1=<ni_id>] [--id.1=<perm_id>] [--name.1=<name>] [--description.1=<desc>]
```

• Confidence: 80% confidence
• Finding: Skill requests more permissions than appear necessary for its stated functionality. Review if elevated access is justified.

Static analysis

No suspicious patterns detected.