ClawHub
Back to skill

Security audit

huawei-cloud-cc-central-network-query

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a read-only Huawei Cloud query helper, but its CLI installation instructions tell users to run unverified remote content with bash.

Review and replace the CLI installation step before installing: prefer Huawei Cloud's official installer script or package instructions with checksum/signature verification. Use a least-privilege Huawei Cloud account limited to read-only Central Network access, and avoid running the bundled test script against production accounts unless you are comfortable listing central network topology.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The guide instructs users to download and immediately execute a shell script from a remote URL via bash without any integrity verification, signature checking, pinning, or warning about the risks of running remote code. If the download source, transport, hosting page, or referenced installer content is compromised, users could execute arbitrary code on their systems and expose cloud credentials used with the CLI.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The documentation labels the policy as least-privilege and sufficient for all Central Network query commands, but the listed IAM actions only explicitly mention cc:centralNetworks:list and cc:centralNetworks:get while the table claims coverage for attachments and connections as well. If those operations actually require distinct IAM actions, users may deploy an under-scoped policy that causes authorization failures, incomplete audits, or false confidence that monitoring and topology review are working when some resources are silently inaccessible.

Content

No source excerpt is available for this finding.

Excessive Permissions

Low
Category
Privilege Escalation
Confidence
80% confidence
Finding

Skill requests more permissions than appear necessary for its stated functionality. Review if elevated access is justified.

Content

Scanner excerpt · SKILL.md (reported line 58)May include surrounding context.

md
## Prerequisites

1. **hcloud CLI** installed and authenticated. See `references/cli-installation-guide.md`.
2. **IAM permissions:** `cc:centralNetworks:list` and `cc:centralNetworks:get`. See `references/iam-policies.md`.
3. **Region:** Central Network is a global service — use any region where CC is available (e.g., `cn-north-4`).
4. **Domain ID:** Most commands require `--domain_id` (account ID). Obtain from IAM → My Credentials.

Excessive Permissions

Low
Category
Privilege Escalation
Confidence
60% confidence
Finding

Skill requests more permissions than appear necessary for its stated functionality. Review if elevated access is justified.

Content

Scanner excerpt · SKILL.md (reported line 58)May include surrounding context.

md
## Prerequisites

1. **hcloud CLI** installed and authenticated. See `references/cli-installation-guide.md`.
2. **IAM permissions:** `cc:centralNetworks:list` and `cc:centralNetworks:get`. See `references/iam-policies.md`.
3. **Region:** Central Network is a global service — use any region where CC is available (e.g., `cn-north-4`).
4. **Domain ID:** Most commands require `--domain_id` (account ID). Obtain from IAM → My Credentials.