Security audit

Alibaba Cloud Observability SLS Log Query

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims: it helps query Alibaba Cloud SLS logs, but users should treat the returned logs and cloud credentials as sensitive.

Install only in a dedicated virtual environment, use read-only Alibaba Cloud credentials scoped to the needed SLS projects and logstores, verify SLS_ENDPOINT points to the intended Alibaba Cloud endpoint, and avoid broad queries if logs may contain secrets, personal data, or internal tokens.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/query_logs.py:29
Finding: Unrestricted SLS Endpoint Allows Sensitive Authenticated Requests to an Attacker-Controlled Host
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:15
Finding: Unpinned Third-Party SDK Installation Creates a Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire skill reference is written in Chinese and provides no indication that language selection is optional or that the skill is intentionally limited to Chinese-speaking users. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The script retrieves remote logs from Alibaba Cloud SLS and prints each row directly to stdout as JSON, with no filtering, masking, or warning that the output may contain secrets, personal data, tokens, or internal application details. In an agent-skill context, this is more dangerous because downstream tooling, transcripts, or users may automatically capture and persist the output, increasing the chance of unintended sensitive-data disclosure.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The markdown uses Chinese-only headings and instructions such as "Python SDK 基本调用" and "安装", which imposes a specific language on users without any opt-in or justification. The policy allows locale constraints only when they are optional or clearly documented as necessary.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.