ClawHub
Back to skill

Security audit

Aliyun Codeup

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Aliyun Codeup helper, but it handles a personal access token in a way that could expose it locally.

Install only if you trust the publisher and need clone-based Codeup inspection. Use a dedicated read-only token with the smallest required scope, avoid using a broad personal token, and be aware that private repository contents are temporarily cloned locally during use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Tainted flow: 'git_url' from os.getenv (line 47, credential/environment) → subprocess.run (code execution)

Medium
Category
Data Flow
Content
# 克隆仓库（获取所有分支信息）
        git_url = f"https://oauth2:{token}@codeup.aliyun.com/{project_path}.git"
        print(f"📥 正在克隆项目 {repo_name}...")
        subprocess.run(
            ['git', 'clone', '--quiet', '--no-tags', git_url, repo_path],
            check=True,
            capture_output=True,
Confidence
93% confidence
Finding
subprocess.run( ['git', 'clone', '--quiet', '--no-tags', git_url, repo_path], check=True, capture_output=True, timeout=120 )

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The code transmits and stores the personal access token in a URL string, which is a well-known insecure pattern because URLs are frequently logged, surfaced in process inspection, and included in error messages. In this file, error handling returns stderr from failed git operations, increasing the chance that authentication details or sensitive remote information are exposed back to the user.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.