Security audit
Security checks across malware telemetry and agentic risk
This skill is mostly a disclosed Huawei Cloud CCI admin helper, but it includes high-impact cloud authority with unsafe helper-script behavior and broader operations than its stated lifecycle purpose.
Use this only with a least-privilege Huawei Cloud profile in a non-critical or tightly scoped project. Review the Python helper before running it, avoid passing untrusted region values, do not use the helper delete action unless you have independently confirmed the target, and treat logs, events, and secret-related operations as sensitive data. The clean VirusTotal and static scan results reduce concern about known malware, but they do not remove the workflow and command-safety issues found in the artifacts.
import subprocess
try:
cmd = f"hcloud IAM KeystoneListProjects --cli-region={region} --cli-output=json"
result = subprocess.run(
cmd, capture_output=True, timeout=15,
encoding="utf-8", errors="replace", shell=True,
)65/65 vendors flagged this skill as clean.
No suspicious patterns detected.