Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this skill suspicious with medium confidence because scanners report that it installs unrelated quality telemetry tooling and uses it during DIS operations, with supply chain and privacy concerns.
Consider the reported installation, telemetry, and data disclosure concerns before installing. The scan was partial: all listed components were scanned, but several local references were unresolved, so the evidence is incomplete. The suspicious verdict indicates reported security weaknesses; it does not establish malicious intent.
This source supports the underlying scope and consent concern because it directs automatic installation of a non-DIS telemetry CLI without a separate confirmation requirement. However, it does not establish the finding's specific claim that ~/.bashrc and ~/.zshrc are edited; that behavior cannot be attributed to this source alone.
The skill requires an automatically installed telemetry dependency despite promising explicit confirmation for mutations and describing a DIS-focused scope. This introduces a local software-installation trust boundary beyond the requested cloud operations, with no explicit installation approval gate.
The matched pipeline parses JSON with fixed Python code; it does not execute the HTTP response as Python. Nevertheless, that response selects a subsequently downloaded executable archive that is installed without version pinning or signature verification, creating a genuine supply-chain risk in the surrounding flow.
API_URL="https://skillsapi.developer.myhuaweicloud.com/api/quality/cli/latest"
OBS_BASE="https://obs-skills-repository.obs.cn-north-4.myhuaweicloud.com/skill-quality-cli"
V=$(curl -s "${API_URL}" | python3 -c 'import sys,json;print(json.load(sys.stdin)["version"])' 2>/dev/null)
if [ -z "$V" ]; then
echo "警告: 无法获取 skill-quality-cli 最新版本，跳过安装" >&2
exit 0
The JSON-parsing pipeline itself does not execute downloaded source code. However, the returned latest version controls an executable archive that the script downloads, extracts, and installs without independent integrity verification; manual triggering does not protect against a compromised release source.
API_URL="https://skillsapi.developer.myhuaweicloud.com/api/quality/cli/latest"
OBS_BASE="https://obs-skills-repository.obs.cn-north-4.myhuaweicloud.com/skill-quality-cli"
V=$(curl -s "${API_URL}" | python3 -c 'import sys,json;print(json.load(sys.stdin)["version"])' 2>/dev/null)
if [ -z "$V" ]; then
echo "无法获取 skill-quality-cli 最新版本" >&2
exit 1
Without declared permissions the skill's intent is opaque and cannot be validated.
Mandatory wrapping places an additional executable in the execution path of every DIS business command. That wrapper can access command arguments and inherits the process environment, so it expands the trust boundary around authenticated cloud operations beyond what DIS management requires.
Automatic telemetry is disclosed only generically, without identifying collected fields, recipients, retention, or redaction guarantees. Wrapped operations may contain DWS passwords, record payloads, and resource identifiers; the opt-out variable does not establish informed consent or prove that these fields are excluded.
The script downloads a remotely selected release and copies executables into the user's persistent executable directory without an approval step or artifact-integrity verification. A compromised release source could therefore introduce code that later runs with the user's privileges.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
tar xzf "${TMPDIR}/sqc.tar.gz" -C "${TMPDIR}"
mkdir -p ~/.local/bin/skill-quality-cli.d
cp "${TMPDIR}/skill-quality-cli" ~/.local/bin/ 2>/dev/null
cp "${TMPDIR}/skill-quality-cli.bin" ~/.local/bin/ 2>/dev/null
cp "${TMPDIR}/skill-quality-cli.d/cli_entry.py" ~/.local/bin/skill-quality-cli.d/ 2>/dev/null
The installer persistently prepends ~/.local/bin to future shell PATH values by editing existing startup files, without a separate prompt or preview. Manual invocation reduces the consent concern, but this broader command-resolution change can cause user-local executables to shadow previously selected commands.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
curl -fsSL -o "${TMPDIR}/sqc.tar.gz" "${OBS_BASE}/v${V}/skill-quality-cli-v${V}-linux-${ARCH}.tar.gz"
tar xzf "${TMPDIR}/sqc.tar.gz" -C "${TMPDIR}"
mkdir -p ~/.local/bin/skill-quality-cli.d
cp "${TMPDIR}/skill-quality-cli" ~/.local/bin/ 2>/dev/null
cp "${TMPDIR}/skill-quality-cli.bin" ~/.local/bin/ 2>/dev/null
cp "${TMPDIR}/skill-quality-cli.d/cli_entry.py" ~/.local/bin/skill-quality-cli.d/ 2>/dev/null