ClawHub
Back to skill

Security audit

huawei-cloud-obs-dir-count

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed, read-only Huawei OBS directory counter, with credential and shell-use cautions users should handle carefully.

Before installing, be comfortable granting read-only OBS listing access. Configure Huawei AK/SK only in your own terminal, avoid pasting secrets into chat, prefer least-privilege bucket-scoped IAM permissions, and review that obsutil may store credentials in your home configuration.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
# problems surface through _translate_cli_error at runtime.
    have_hcloud = False
    try:
        proc = subprocess.run(
            ["bash", "-lc", "command -v hcloud"], capture_output=True, text=True, timeout=10
        )
        have_hcloud = proc.returncode == 0
Confidence
79% confidence
Finding
proc = subprocess.run( ["bash", "-lc", "command -v hcloud"], capture_output=True, text=True, timeout=10 )

Context-Inappropriate Capability

Medium
Confidence
85% confidence
Finding
The skill includes raw credential-configuration command examples using AK/SK placeholders, which can normalize handling long-lived secrets in command lines and increase the chance users expose credentials in shell history, logs, screenshots, or chat. Although it tells users not to paste secrets into the conversation, embedding this pattern in the skill exceeds the narrow directory-counting function and encourages risky operational behavior.

Unvalidated Output Injection

High
Category
Output Handling
Content
# problems surface through _translate_cli_error at runtime.
    have_hcloud = False
    try:
        proc = subprocess.run(
            ["bash", "-lc", "command -v hcloud"], capture_output=True, text=True, timeout=10
        )
        have_hcloud = proc.returncode == 0
Confidence
76% confidence
Finding
subprocess.run( ["bash", "-lc", "command -v hcloud"], capture_output

VirusTotal

57/57 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.