{"data":{"skill":{"slug":"modelarts-agent-modelarts-skill","name":"modelarts-skill","icon":"📦","repo":"https://github.com/modelarts-agent/huawei-cloud-modelarts-skill/tree/main/","status":"approved","author":"modelarts-agent","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"ebcc28eb-c4be-4701-8df7-fc0c56f966bb","skill_id":"e9ce9777-e7a6-4bda-8eb1-ec4fada7b615","version":1,"content_hash":"5f3f8a14760032393c85b946946c4777","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"This is a legitimate Huawei Cloud ModelArts integration skill. All 1169 static findings were evaluated: the vast majority are false positives in Markdown documentation files showing CLI command examples (577 external_commands hits). Critical findings for Windows SAM database and C2 keywords are false positives matching Huawei Cloud project IDs and unrelated comments. The code has a well-designed security model with credential isolation - API keys are stored in memory and masked before any LLM-facing output. Real concerns are limited to expected cloud SDK behaviors: environment variable access for credentials and network calls to Huawei Cloud APIs.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"scripts/auth_manager.py","line_end":278,"line_start":277},{"file":"scripts/train_module/job_create.py","line_end":86,"line_start":48}]},{"factor":"network","evidence":[{"file":"scripts/infer_v1_module/make_token_auth_request.py","line_end":26,"line_start":13},{"file":"scripts/kms_module/common.py","line_end":83,"line_start":83},{"file":"scripts/swr_module/image_repos.py","line_end":111,"line_start":111},{"file":"scripts/vpc_module/common.py","line_end":123,"line_start":123}]},{"factor":"env_access","evidence":[{"file":"scripts/auth_manager.py","line_end":52,"line_start":52},{"file":"scripts/auth_manager.py","line_end":89,"line_start":89},{"file":"scripts/auth_manager.py","line_end":191,"line_start":191},{"file":"scripts/management_module/authorization.py","line_end":79,"line_start":32},{"file":"scripts/kms_module/common.py","line_end":50,"line_start":50},{"file":"scripts/swr_module/image_repos.py","line_end":83,"line_start":83},{"file":"scripts/vpc_module/common.py","line_end":90,"line_start":90}]},{"factor":"scripts","evidence":[{"file":"scripts/infer_v1_module/_bootstrap.py","line_end":21,"line_start":15},{"file":"scripts/infer_v2_module/_bootstrap.py","line_end":23,"line_start":17},{"file":"scripts/liteserver_module/_bootstrap.py","line_end":35,"line_start":16},{"file":"scripts/pool_module/_bootstrap.py","line_end":26,"line_start":15}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Environment Variable Access for API Credentials","locations":[{"file":"scripts/auth_manager.py","line_end":52,"line_start":52},{"file":"scripts/auth_manager.py","line_end":89,"line_start":89},{"file":"scripts/auth_manager.py","line_end":191,"line_start":191},{"file":"scripts/management_module/authorization.py","line_end":79,"line_start":32}],"description":"The skill reads environment variables for ModelArts access keys (AK/SK) and project configuration. This is expected for a cloud SDK integration but represents a real security consideration. The code properly masks credentials before returning data to the LLM."},{"title":"Hardcoded Project ID in Code Examples","locations":[{"file":"scripts/infer_v1_module/get_dedicated_pool.py","line_end":52,"line_start":52},{"file":"scripts/notebook_module/create_notebook.py","line_end":70,"line_start":70},{"file":"scripts/pool_module/create_pool.py","line_end":109,"line_start":109}],"description":"A Huawei Cloud project ID (0f2788726a80f4ec2fecc00b5844a0c2) is hardcoded as a default parameter value and in documentation examples. While a project ID is not a secret credential, hardcoding internal identifiers is a data leakage concern."},{"title":"Network Requests to External APIs","locations":[{"file":"scripts/infer_v1_module/make_token_auth_request.py","line_end":26,"line_start":13},{"file":"scripts/swr_module/image_repos.py","line_end":111,"line_start":111}],"description":"The skill makes HTTP requests to Huawei Cloud ModelArts API endpoints. This is expected functionality for a cloud platform integration skill. All requests are to documented Huawei Cloud API endpoints using authenticated sessions."}],"dangerous_patterns":[{"title":"External Commands in Documentation Files","locations":[{"file":"references/common.md","line_end":17,"line_start":10},{"file":"references/infer_v1.md","line_end":44,"line_start":10},{"file":"SKILL.md","line_end":106,"line_start":17}],"description":"Markdown documentation files (references/*.md) contain shell command examples using backtick notation. These are documentation-only and not executed. Confirmed false positive after file content review."},{"title":"Weak Cryptographic Algorithm References","locations":[{"file":"scripts/kms_module/__init__.py","line_end":8,"line_start":8},{"file":"scripts/common_module/__init__.py","line_end":25,"line_start":25}],"description":"Static scanner flagged references to KMS (Key Management Service) as weak cryptography. The skill uses Huawei Cloud ModelArts SDK's built-in authentication (auth_by_apig), not custom cryptographic implementations. Confirmed false positive."},{"title":"C2 Keyword Pattern Match on Project IDs","locations":[{"file":"scripts/infer_v1_module/get_dedicated_pool.py","line_end":52,"line_start":52},{"file":"scripts/pool_module/create_pool.py","line_end":109,"line_start":109}],"description":"Static scanner flagged Huawei Cloud project IDs as potential C2 beacon identifiers. The string '0f2788726a80f4ec2fecc00b5844a0c2' appearing in code is a legitimate cloud project ID used for API routing, not a command-and-control indicator."},{"title":"Dynamic Import Pattern Matches","locations":[{"file":"scripts/infer_v1_module/_bootstrap.py","line_end":21,"line_start":15},{"file":"scripts/liteserver_module/_bootstrap.py","line_end":35,"line_start":16}],"description":"Static scanner flagged __import__() expressions in bootstrap files. These are standard Python module loading patterns used for the skill's modular architecture. No dynamic code execution from untrusted input occurs. Confirmed false positive."},{"title":"Windows SAM Database False Positive","locations":[{"file":"scripts/tools.py","line_end":12,"line_start":8},{"file":"scripts/notebook_module/list_notebooks.py","line_end":32,"line_start":32}],"description":"Static scanner flagged multiple files as containing Windows SAM database references. File content review confirms no SAM database artifacts exist. The pattern match was triggered by unrelated comments about security and credential handling."}],"files_scanned":232,"total_lines":15797,"audit_model":"claude","audited_at":"2026-05-25T07:59:10.065+00:00","created_at":"2026-05-25T11:17:27.412109+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"low","confirmedFindingCount":1,"capabilityReviewCount":2,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}