huaweicloud/huaweicloud-devkit
C3Official Huawei Cloud plugin for AI agents — skills, MCP tools, safety guardrails, and cloud sandbox to help AI agents build, deploy, and operate on Huawei Cloud securely.
★ 50+ · huaweicloud/huaweicloud-devkit source on GitHub · this plugin in the registry
huaweicloud/huaweicloud-devkit is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, runs code at install time, gates tool execution, executes system commands.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| runs code at install time | install_script | postinstall: node ./bin/dsh-postinstall.cjs |
| gates tool execution | tool_gate | hook: tools/pre-execute |
| executes system commands | exec | ×81 in authored code, e.g. scripts/bump-version.mjs:1, scripts/bump-version.mjs:1 |
| decodes base64 payloads | base64_decode | ×1 in authored code, e.g. plugins/huaweicloud-core/src/search-market.mjs:61 |
| starts a network server | net_server | ×2 in authored code, e.g. plugins/huaweicloud-core/src/mcp-server-remote.mjs:12, plugins/huaweicloud-core/src/ws-exec/hwlink-tunnel-channel.mjs:138 |
| reads credential-class env vars | token_env | GITHUB_TOKEN, HW_ACCESS_KEY, HW_API_KEY, HW_SECRET_KEY, HW_SECURITY_TOKEN, RELEASE_PLEASE_TOKEN |
Services it injects
tools
Hooks it attaches
tools/pre-execute tools/result
Outbound domains
open.huaweicloud.com support.huaweicloud.com developer.huaweicloud.com gitcode.com devstation.connect.huaweicloud.com devkit.huaweicloud.com cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com console.huaweicloud.com iam.myhuaweicloud.com devstation.myhuaweicloud.com
Environment variables it reads
LOCALAPPDATA HW_ACCESS_KEY HW_SECRET_KEY DSH_HOME HERMES_HOME HUAWEICLOUD_HOME HUAWEICLOUD_DEVKIT_DEBUG HW_SECURITY_TOKEN HCLOUD_BIN HTTPS_PROXY
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.