ClawHub
Back to skill

Security audit

huawei-cloud-kubectl-cce-installer

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed local installer for kubectl and the Huawei Cloud CCE plugin, with meaningful supply-chain cautions but no hidden cloud, credential, or destructive behavior in the artifacts.

Before installing, review the displayed plan, confirm the bin directory, and only approve --execute if you are comfortable downloading or building kubectl and kubectl-cce from the documented public sources. Prefer a user-writable bin directory when possible, and avoid sudo unless you intentionally want the executables installed system-wide.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill explicitly instructs the agent to run bundled shell commands, but it does not declare corresponding permissions. That mismatch weakens policy enforcement and auditability because a caller may not realize the skill can execute local shell actions that install binaries and modify PATH-adjacent locations.

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The script is presented as a local installer, but it can transparently escalate into cloning and compiling large upstream source trees when binary download paths fail. That materially expands the trust boundary and attack surface: users who expect a simple package fetch may instead execute unpinned toolchains and repository content from network sources, increasing supply-chain and remote code execution risk during build steps.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
Building kubectl from the Kubernetes repository is broader than necessary for an installer whose stated purpose is to install kubectl locally. The fallback clones remote code and invokes go build, which can execute module/toolchain behavior and consumes significant resources, creating unnecessary supply-chain exposure and making the script more dangerous in a privileged installation context.

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
The plugin fallback similarly allows automatic cloning and compilation from a remote repository when a release asset is missing. In an installer that writes executables into a shared bin directory, this behavior increases supply-chain risk and can result in execution of attacker-controlled or compromised code if the repository, tag, or build chain is tampered with.

Static analysis

No suspicious patterns detected.