Security audit
Security checks for vulnerabilities and agentic risk
The backup-listing code is narrowly scoped, but its installation instructions execute an unverified remote script and its credential-handling assurances conflict.
Use a verified KooCLI download from Huawei's official documentation instead of executing the supplied installer command. Use credentials restricted to backup listing, and understand that SDK fallback reads those keys into process memory despite the main documentation's assurance. The flagged test-file gap was independently investigated; external installer contents and live cloud behavior remain unverified. No malicious payload was found in the bundled files.
Without declared permissions the skill's intent is opaque and cannot be validated.
The guide downloads a mutable remote installer and immediately executes it without integrity verification or a review step. Although HTTPS protects transport, compromise of the distribution endpoint or installer supply chain could execute arbitrary code with the invoking user's privileges, potentially accessing cloud credentials; the skill's read-only API restriction does not protect this installation path.
The pass criteria explicitly require a Chinese hint on stderr for error paths. The file provides neither a user language choice nor a documented justification for imposing Chinese-language output.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
The module documentation at L007-L009 explicitly states that this script never reads AK/SK itself. However, L435-L452 retrieve access and secret keys directly from environment variables, and L517-L530 pass those values into BasicCredentials. Authentication is justified for the declared SDK fallback, but the assurance that credential handling is delegated entirely to hcloud or the SDK is false.
The criterion requires the user-facing empty-list hint to be 「当前区域（x）无 CBR 备份」, fixing that output in Chinese. No language choice or justification for this language requirement is provided.