Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent guide for managing Oray/PgyVPN SD-WAN networks, with real operational risk that users should handle carefully.
Install only if you intend to let an AI client manage your PgyVPN/Oray SD-WAN resources. Treat the MCP API key like a password, keep it out of chats, screenshots, repositories, and shared dotfiles, and review every network, device, password, or delete operation before confirming it, especially on production or remote-access networks.
The README instructs users to copy a configuration JSON containing an MCP secret key into local config files without warning that the key is sensitive. This creates a realistic risk of credential exposure through screenshots, repo commits, shared dotfiles, backups, or overly broad filesystem access by other tools.
The README advertises destructive and state-changing capabilities such as updating/deleting networks and binding/unbinding devices, but does not warn that these actions can disrupt connectivity, orphan devices, or impact production remote access. In the context of an AI-operated network-management skill, omission of operational-risk warnings increases the chance of unsafe use and accidental outages.
The trigger list includes broad terms such as '组网', '远程办公', '内网穿透', and device/member keywords that can match many generic networking or remote-access requests, causing the skill to activate outside the user's intended scope. In this skill's context, unintended invocation is more dangerous because the skill guides users toward configuring MCP access and managing real SD-WAN resources, which can expose credentials or prompt network-changing actions.
The skill tells users to generate an MCP API key and paste it into local configuration files, but it does not clearly label the key as a sensitive secret, warn against sharing/checking it into source control, or recommend least-privilege storage practices. Because this key enables AI-driven management of SD-WAN networks and devices, leakage could allow unauthorized network enumeration, member management, password resets, or destructive changes through the MCP server.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
# Debian/Ubuntu
sudo dpkg -i pgyvisitor_xxx_amd64.deb
sudo apt-get install -f
# CentOS/RHEL
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
# Debian/Ubuntu
sudo dpkg -i pgyvisitor_xxx_amd64.deb
sudo apt-get install -f
# CentOS/RHEL
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
# Debian/Ubuntu
sudo dpkg -i pgyvisitor_xxx_amd64.deb
sudo apt-get install -f
# CentOS/RHEL
该 README 描述了技能用途和覆盖范围，但没有提供明确的触发短语、限定条件或不应触发的负例。对于适用于 manifest/markdown 的触发质量要求而言，这种仅描述能力、不定义调用边界的写法容易造成激活条件模糊。