Security audit

huawei-cloud-terraform-generator

Security checks across malware telemetry and agentic risk

Overview

This skill is a broad Huawei Cloud Terraform assistant that can create real cloud resources, but its behavior is disclosed, user-confirmed, and aligned with its purpose.

Install only if you intend to let the agent generate and optionally apply Huawei Cloud Terraform. Before approving any apply, review the Terraform plan, cost estimate, opened ports, IAM/account changes, and generated .tfvars files; do not commit real credentials or secrets, and replace placeholder sample passwords with properly managed values where needed.

SkillSpector

By NVIDIA

SkillSpector could not complete.

VirusTotal

55/55 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: assets/ecs/instance-provisioners/README.md:74

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: reference/terraform-generation-guide.md:145