Security audit
huawei-cloud-hetu-sql-check
Security checks across malware telemetry and agentic risk
Overview
This skill performs local HetuEngine SQL syntax and standards checks without network access, credentials, persistence, or hidden high-impact behavior.
Installers should understand that the skill runs local Python scripts and can read a file path if the user provides one, so only pass SQL files intended for analysis. The reviewed artifacts otherwise keep analysis local and do not request credentials or connect to a database cluster.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.