Security audit

huawei-cloud-obs-stats

Security checks across malware telemetry and agentic risk

Overview

This skill is a read-oriented Huawei Cloud OBS statistics helper, but users should handle cloud credentials carefully before installing it.

Install only if you intend to let the agent help query Huawei Cloud OBS bucket metadata and monitoring metrics. Use a least-privilege IAM user, prefer interactive or secure credential configuration, do not paste AK/SK into chat or command examples, and be aware the skill can query upload traffic and error metrics in addition to download traffic and request counts.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (5)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 88% confidence
Finding: The skill clearly instructs use of shell commands and network-capable CLIs (`hcloud`, `obsutil`, Python scripts), but no explicit permission declaration is present. That mismatch can cause the platform or reviewers to underestimate the skill's execution and data-access capabilities, weakening governance and increasing the chance of overbroad or unintended tool use.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 90% confidence
Finding: The top-level description says the skill is for bucket listing, download traffic, and total requests, but the body also exposes upload traffic analysis and 4xx/5xx error request statistics. This creates a trust and review gap: operators may authorize or invoke the skill assuming a narrower data-access scope than it actually implements.

Vague Triggers

Medium

Confidence: 72% confidence
Finding: The trigger list contains generic phrases such as bucket list, download traffic, total requests, and month-over-month that may match unrelated storage or analytics requests. Over-broad activation can cause the wrong skill to run, leading to unintended access to cloud metadata or execution of shell/network operations in contexts the user did not intend.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The obsutil example configures credentials with `-ak` and `-sk` directly on the command line, which can expose secrets through shell history, process listings, audit logs, and terminal capture. In a CLI installation guide for a cloud storage skill, users are likely to copy-paste this command verbatim, increasing the chance of accidental credential disclosure.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The troubleshooting guidance instructs users to configure OBS access using AK/SK directly on the command line and includes copy-pastable examples without any warning about secret handling. This is risky because shell history, terminal logging, process inspection, screenshots, and shared terminals can expose credentials, and the document normalizes unsafe secret-entry practices in an agent context.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.