huawei-cloud-swr-image-governance

• Outcome: Pass
• Latest audit: Aug 26, 2026 · 9:50 AM UTC
• Version: 1.0.2

Overview

This is a coherent Huawei Cloud SWR governance skill, with sensitive cloud actions disclosed and gated by user confirmation.

Install only after verifying the hcloud CLI source, use temporary or least-privilege Huawei Cloud credentials where possible, and carefully review every proposed Create/Update/Delete command. Pay particular attention to agency delegation, retention rules that can delete images, permission grants, and shared domains with deadline=forever.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (8)

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The guide instructs users to download and immediately execute a remote shell script, including a non-interactive mode that suppresses confirmation. This creates a supply-chain and arbitrary code execution risk: if the hosting location, DNS, TLS trust chain, or script contents are compromised, users may run attacker-controlled code on their local machine without review.

Missing User Warnings

Low

• Confidence: 87% confidence
• Finding: The manual installation steps place a binary into `/usr/local/bin` with `sudo`, causing a privileged, system-wide change. While common for CLI installation, the lack of warning or safer alternatives can lead users to elevate privileges and install an unverified binary globally, increasing blast radius if the binary is malicious or tampered with.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The guidance tells the operator to create an SWR agency delegation if one is not present, but it does not warn that this modifies cross-service trust/delegation settings and may grant SWR-related services new capabilities. In a cloud administration context, omission of that warning can lead users to make a security-sensitive IAM change without understanding scope, approval requirements, or downstream privilege implications.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The CreateAgency command establishes delegated access for SWR to act against other cloud services on the user's behalf, which changes the trust boundary and can expand privileges beyond the immediate repository task. Without a prominent warning and scope explanation, an operator may enable delegation without understanding the downstream access implications for OBS/CCE integrations.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: Creating a shared download domain grants another IAM domain external read access to repository artifacts, and using `forever` can make that exposure persistent. In an access-governance skill, omitting a warning about cross-tenant sharing and indefinite duration can lead users to unintentionally broaden distribution of private images.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill instructs users to run `CreateAgency` to establish an SWR agency delegation but does not warn that this changes IAM trust/authorization state at the tenant level and may grant SWR access to other services such as OBS or CCE. In an agent-driven workflow, omission of that warning increases the chance of users approving a privileged configuration change without understanding scope, persistence, or organizational impact.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The documented workflow explicitly encourages creating a shared domain with `--deadline=forever`, which grants ongoing external read access to container images, but it does not include a nearby security warning, approval requirement, or least-privilege guidance. In an image registry governance skill, this can normalize broad, long-lived sharing and increase the chance of unauthorized distribution of proprietary or sensitive images if the target domain is incorrect, no longer needed, or insufficiently trusted.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The verification flow includes permission-changing commands that grant namespace access to another user and only later shows cleanup as a normal step, without a prominent warning that this test modifies real access control. In a cloud registry governance skill, users may run these commands against production namespaces, accidentally granting unintended access or failing to revoke it, resulting in privilege exposure and policy drift.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.