ClawHub
Back to skill

Security audit

Alibaba Cloud AI Chatbot

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Alibaba Cloud Chatbot management helper whose credential use, API discovery, and local output are aligned with its stated purpose.

Install only if you want an agent to help administer Alibaba Cloud Chatbot resources. Use a RAM user or role with the narrowest possible permissions, verify region and resource IDs before use, require explicit approval for any mutating API call, and review files saved under output/aliyun-chatbot-manage/ before sharing or committing them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill explicitly relies on environment credentials, writes files, and performs network-backed API discovery, but it declares no permissions or equivalent trust boundaries. This creates a transparency and policy-enforcement gap: an operator may invoke the skill without realizing it can access cloud credentials and make outbound requests, increasing the risk of unintended credential use, unauthorized API calls, or data being written to disk.

Tp4

High
Category
MCP Tool Poisoning
Confidence
82% confidence
Finding
The skill is presented as a resource-management tool for Alibaba Cloud Chatbot, but the documented executable path centers on OpenAPI metadata discovery and local artifact generation rather than direct chatbot management. This mismatch is dangerous because users and orchestrators may grant broader trust or credentials under the assumption of operational management, while the skill actually performs different network activity and persists fetched data locally, reducing predictability and auditability.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.