Security audit
Security checks for vulnerabilities and agentic risk
The inventory code is read-only, but an unverified installer source and inaccurate credential assurances warrant review before installation.
Install KooCLI through Huawei's official instructions and verify the download instead of running the supplied installer command. Use a dedicated read-only cloud identity, confirm the region, and understand that the SDK fallback directly reads environment credentials despite the documentation's assurances.
Although these commands are read-only, they access IAM policy resources rather than SFS file systems. Reporting an SFS permission error does not imply authorization to enumerate or inspect IAM policies. The supplied chunk therefore introduces undeclared capabilities and conflicts with the explicit restriction to ListShares.
Without declared permissions the skill's intent is opaque and cannot be validated.
The guide downloads a mutable installer and immediately executes it without authenticating its contents or explaining its execution privileges and system changes. If the distribution endpoint or installer is compromised, this can execute arbitrary code with the invoking user's permissions, potentially exposing locally available cloud credentials. Installing a required CLI is legitimate, but this setup step falls outside the skill's read-only cloud-operation safeguards.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
The verification criteria explicitly require a Chinese hint on stderr for error paths. This imposes a specific output language without user opt-in or a documented justification for the language constraint.
The module documentation at L007–L009 states that credential resolution is delegated to hcloud/the SDK and that this script never reads AK/SK itself. However, L368–L385 explicitly retrieve access and secret keys from environment variables, and L442–L451 pass those values into BasicCredentials. This contradicts the documented credential-handling boundary, although credential use is justified by the SDK fallback.
No suspicious patterns detected.