huawei-cloud-maas-tokens-usage

• Outcome: Review
• Latest audit: Jul 21, 2026 · 9:32 PM UTC
• Version: 1.0.0

Overview

The skill has a coherent Huawei Cloud usage-monitoring purpose, but its bundled script disables TLS certificate verification while handling cloud credentials.

Review carefully before installing. Use only least-privilege Huawei Cloud credentials, do not print or paste AK/SK values, and avoid running the bundled script unless TLS verification is restored or replaced with a secure CA-bundle option.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 95% confidence
• Finding: The skill instructs the agent to access environment variables, read local credential files, and make outbound network requests, but no explicit permission declaration is present in the skill metadata. This creates a capability/permission mismatch that can bypass least-privilege controls and makes credential handling and external API access harder to govern or audit.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The documentation instructs users to export long-lived Huawei Cloud access credentials into environment variables without any caution about secret handling, shell history, process exposure, or using least-privilege credentials. In a cloud-operations skill that directly interacts with billing/usage APIs, this can normalize unsafe credential practices and increase the chance of credential leakage or misuse.

Missing User Warnings

Medium

• Confidence: 98% confidence
• Finding: The troubleshooting guide explicitly shows `requests.post(..., verify=False)`, which disables TLS certificate validation and makes the client vulnerable to man-in-the-middle attacks. In this skill’s context, the request is used for Huawei Cloud API calls signed with AK/SK-related credentials, so users may transmit sensitive request metadata to an attacker if they copy this example into production or debugging workflows.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The verification instructions explicitly encourage inspecting a credentials file with `cat` and demonstrate use of long-lived access keys without any warning about secret exposure. This can lead users to reveal credentials in terminals, logs, screenshots, shell history, or shared environments, increasing the risk of credential theft and unauthorized cloud access.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The end-to-end script performs an authenticated API call using a hardcoded local credentials file path, but provides no warning about protecting the file, limiting permissions, or the sensitivity of transmitting requests with cloud credentials. In practice, this normalizes unsafe secret handling and may cause users to store keys in predictable locations or run the script in environments where paths, outputs, or credentials are exposed.

Missing User Warnings

High

• Confidence: 99% confidence
• Finding: The code explicitly disables TLS certificate verification for all HTTPS requests to IAM and MaaS endpoints via verify=False, while also suppressing the related warnings. This makes the skill vulnerable to man-in-the-middle interception or tampering of signed API requests and responses, which is especially dangerous because the script handles cloud access credentials and usage data.

Unsafe Defaults

Medium

• Category: Tool Misuse

Content

req_headers[k] = v

    url = f"https://{host}{signed_req.uri}"
    return requests.request(method, url, headers=req_headers, data=body, verify=False, timeout=30)


def get_project_id(ak, sk, region):

• Confidence: 99% confidence
• Finding: verify=False

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.insecure_tls_verification

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: scripts/maas_rest_usage_stats.py:85