huaweicloud-python-sdk-helper

• Outcome: Pass
• Latest audit: May 26, 2026, 2:10 PM
• Version:
  1.0.0

Overview

This is a disclosed Huawei Cloud SDK lookup helper that locally inspects installed SDK packages and does not show hidden network, credential, persistence, or destructive behavior.

Safe to install for SDK lookup use. Run it in a trusted Python environment, install Huawei SDK packages from trusted sources, and do not ask it to inspect arbitrary third-party module paths unless you trust those installed packages.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Dynamic attribute access via getattr()

Low

• Category: Dangerous Code Execution

Content

module_path = '.'.join(class_name.split('.')[:-1])
            cls_name = class_name.split('.')[-1]
            mod = importlib.import_module(module_path)
            target_class = getattr(mod, cls_name, None)
            if target_class:
                target_module_path = class_name
        except Exception:

• Confidence: 75% confidence
• Finding: target_class = getattr(mod, cls_name, None)

VirusTotal

65/65 vendors flagged this skill as clean.