动环综合网管交互式登录

• Outcome: Review
• Latest audit: Jul 17, 2026 · 9:48 AM UTC
• Version: 1.0.0

Overview

This is a disclosed login helper, but it handles passwords and reusable session cookies in ways that could expose them, so users should review it carefully before installing.

Install only in a trusted internal environment and only if you are comfortable with a tool that handles your password, triggers SMS login, and saves a reusable session cookie. Before use, remove TLS bypass or pin the trusted server, avoid passing real passwords on the command line, prevent plaintext password temp files, store cookies with 0600 permissions or a credential store, and rotate any example credentials if they are real.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill describes shell execution, HTTP requests, and writing session cookies to disk, but declares no permissions or capability boundaries. This is dangerous because a login helper handling credentials and persistent session tokens can access sensitive data and modify local files without explicit user-visible permission scoping, increasing the chance of unsafe invocation or misuse by downstream automation.

Vague Triggers

Medium

• Confidence: 82% confidence
• Finding: The trigger list includes broad phrases such as obtaining cookies, refreshing sessions, login captcha, and generic 'dh login' style activation text, which can cause the skill to run in contexts broader than strictly intended. For a skill that handles passwords, triggers SMS-based 2FA, and persists authenticated cookies, overbroad activation raises the risk of unintended execution and accidental exposure or reuse of authentication artifacts.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The script writes the plaintext password to a predictable temporary file before encrypting it with openssl. Any local user, backup process, crash dump, or forensic recovery of the working directory could expose the password, defeating the protection offered by RSA transport encryption.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The script persists the session cookie to a file without setting restrictive permissions or warning that it is a bearer token. Anyone who can read that file can likely reuse the authenticated session and access the management platform as the user.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- Cookie 写入文件后，监控脚本 `acquire_session()` 会优先读取该文件，实现定时任务全自动运行
- 密码以明文作为参数传入，请确保执行环境安全（不要在共享终端暴露命令历史）
- ddddocr 对 `?` 常误识为 `9`、`×` 误识为 `x`，脚本已做算术后处理，答案通常正确，但建议用户看 `_captcha.png` 图片二次确认
- 自签名证书使用 `curl -k` 跳过校验，仅限内网可信环境使用

• Confidence: 97% confidence
• Finding: curl -k

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

DEFAULT_BASE = 'https://172.20.251.9:30666'


# ===== curl 封装 =====
def _curl_get(url, CJ):
    r = subprocess.run(
        ['curl', '-k', '-s', '--connect-timeout', '15', '-b', CJ, '-c', CJ, url],

• Confidence: 99% confidence
• Finding: curl 封装 ===== def _curl_get(url, CJ): r = subprocess.run( ['curl', '-k', '-s', '--connect-timeout', '15', '-b', CJ, '-c', CJ, url], capture_output=True, timeout=30) return r.st

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: scripts/donguan_login.py:98