ClawHub
Back to skill

Security audit

Alibaba Cloud Media Live

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Alibaba Cloud live-video management skill that needs scoped credentials and care because it can guide real service changes.

Install only if you want an agent to help manage Alibaba Cloud ApsaraVideo Live. Use temporary least-privilege RAM or STS credentials limited to the intended domains and operations, confirm every add/set/delete/forbid/resume action before execution, and review or redact output/aliyun-live-manage/ before sharing because it may contain stream names, domains, auth settings, signed URLs, or other operational details.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill uses environment variables, writes local files, and performs network access, but does not declare permissions or capabilities up front. This creates a transparency and least-privilege problem: an operator may invoke the skill without realizing it can read cloud credentials from the environment and transmit data externally.

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding
The documented purpose claims broad live-resource management, but the described executable path only fetches API metadata and generates local inventory output. This mismatch is dangerous because users may authorize or trust the skill for production cloud administration even though its actual implementation and validation do not demonstrate those capabilities, increasing the risk of unsafe follow-on modifications or misuse of credentials.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The template documents operationally disruptive APIs such as forbidding or resuming live streams, but it does not warn that these actions can immediately affect service availability or customer access. In a skill intended to manage production live-streaming infrastructure, omission of impact guidance increases the chance of accidental outages or unintended recording/storage changes during routine use.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.