OpsBuddy

• Outcome: Review
• Latest audit: Aug 5, 2026 · 8:20 AM UTC
• Version: 1.0.2

Overview

The skill is a coherent OpsBuddy setup helper, but it asks users to paste a full bearer-token config into chat and stores that token persistently without adequate safeguards.

Review this before installing. Only use it if you are comfortable exposing the OpsBuddy MCP token to the assistant conversation and storing it in ~/.workbuddy/mcp.json. Prefer manually placing the config locally, redacting secrets from chat, setting restrictive file permissions, and knowing how to revoke or rotate the token before enabling the server.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill instructs the agent to write configuration data containing an API key into a persistent local file without clearly warning about the sensitivity of the credential or recommending file permission safeguards. This creates a realistic risk of secret exposure through insecure storage, backups, local malware, or multi-user access on the host.

Ssd 3

High

• Confidence: 99% confidence
• Finding: The skill explicitly tells the user to paste the full MCP config JSON, which contains the bearer token, directly into the conversation. That exposes credentials in plain text to chat history, model processing pipelines, logs, screenshots, and any downstream retention or analytics systems tied to the assistant.

MCP Config Access

High

• Category: Agent Snooping

Content

Regardless of what the user asks, first present the following overview:

> Connecting "OpsBuddy" takes 2 steps:
> 1. **Obtain the API Key**: Open the portal `http://127.0.0.1:8080` → register (system auto-approval) → log in → "My Applications" → download the MCP config JSON (contains the API Key).
> 2. **Write the config**: Paste the downloaded JSON to me, and I write it into `~/.workbuddy/mcp.json`; then in WorkBuddy "Plugins → MCP Servers", click "Trust / Enable" for "OpsBuddy".
>
> After connecting, all ops capabilities are covered: cmdb (assets), server (hosts), business (business systems), database (databases), middleware (middleware), diagnose (fault diagnosis), log (logs), feedback (feedback).

• Confidence: 98% confidence
• Finding: load the MCP config

MCP Config Access

High

• Category: Agent Snooping

Content

- Guide the user to open the portal **`http://127.0.0.1:8080`** (state the URL clearly) → registration page → fill in username / password / company / email / email verification code → submit the application.
- After submission, the **system auto-approves**, and the account is immediately usable (no need to wait for an admin).
- The user logs in to the portal → "My Applications" → click **"Download MCP Config"** on the approved record → get `mcp-config.json`.
- Ask the user to paste the **full** JSON to you (it contains the API Key).

### Step 2: Write the Config and Enable

• Confidence: 99% confidence
• Finding: load MCP Config

Session Persistence

Medium

• Category: Rogue Agent

Content

> Connecting "OpsBuddy" takes 2 steps:
> 1. **Obtain the API Key**: Open the portal `http://127.0.0.1:8080` → register (system auto-approval) → log in → "My Applications" → download the MCP config JSON (contains the API Key).
> 2. **Write the config**: Paste the downloaded JSON to me, and I write it into `~/.workbuddy/mcp.json`; then in WorkBuddy "Plugins → MCP Servers", click "Trust / Enable" for "OpsBuddy".
>
> After connecting, all ops capabilities are covered: cmdb (assets), server (hosts), business (business systems), database (databases), middleware (middleware), diagnose (fault diagnosis), log (logs), feedback (feedback).
> For platform connections (Signoz / Tencent Cloud / Aliyun / Nightingale), log in to the portal and operate in the "Platforms" page.

• Confidence: 90% confidence
• Finding: Write the config**: Paste the downloaded JSON to me, and I write it into `~/.workbuddy/mcp.json`; then in WorkBuddy "Plugins → MCP Servers", click "Trust / Enable" for "OpsBuddy". > > After connecting

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

No suspicious patterns detected.