Security audit

huawei-cloud-gaussdb-count

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed, read-only Huawei Cloud GaussDB instance counter, with minor scoping cautions around broad trigger phrases and manual CLI installation steps.

Install only if you want an agent to query your Huawei Cloud GaussDB inventory. Use a read-only IAM policy, confirm the target cloud account and region before running broad GaussDB count requests, and review the manual KooCLI install command before using sudo.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

High

Confidence: 92% confidence
Finding: The negative test explicitly documents that a create-instance request can be considered a similar trigger to this count skill, which indicates ambiguous intent matching at the skill boundary. Even though this specific skill is read-only and tests show the write operation is blocked, ambiguous routing can cause an agent to invoke the wrong skill for sensitive requests, leading to unintended data disclosure, user confusion, or unsafe tool-selection chains in a larger system.

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The trigger phrase "GaussDB数量" is broad enough to match generic database-count requests without clearly constraining vendor, product family, or intended action path. In a skill-routing system, ambiguous triggers can cause accidental invocation of this skill for unrelated requests, leading to incorrect tool selection, unintended cloud API calls, and possible disclosure of inventory metadata to a user who did not explicitly request this specific Huawei Cloud action.

Vague Triggers

Medium

Confidence: 89% confidence
Finding: Repeating "GaussDB数量" as an activation condition without scope limits reinforces an overly permissive match rule across multiple examples. This increases the likelihood of unintended routing and makes the ambiguity systemic rather than incidental, especially in multilingual assistant environments where short noun-phrase triggers are heavily reused.

Vague Triggers

Medium

Confidence: 88% confidence
Finding: Using the same generic phrase in the regional-query example shows that even parameterized flows still rely on a trigger that is too general. If exploited indirectly through prompt phrasing collisions, the assistant may invoke this skill in contexts where the user only asked for a general database count, causing unnecessary access to cloud account inventory and reducing routing reliability.

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger phrases are broad enough to match ordinary user requests about GaussDB and even partially overlap with non-counting intents, as shown by N4 where a creation request is considered a near trigger. This can cause the wrong skill to activate, leading to unintended access to cloud inventory data and bypassing user intent boundaries, even if the skill is read-only.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.