Scanned skills

huaweicloud/huaweicloud-skills huawei-cloud-monitoring-query

Checked the catalogued skill at huawei-cloud-monitoring-query.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 10
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

10 findings
securityhigh SD-007
scripts/config.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
securityhigh SD-007
scripts/ensure_env.py
2 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

The manifest merely advises against using curl, not granting permission to execute outbound calls.

securityhigh SD-007 benign_example
scripts/config.py

File is prose; outbound call patterns are mentioned as examples, not real network calls.