Security audit
Security checks for vulnerabilities and agentic risk
The skill mostly reports on Huawei Cloud EIPs, but its documentation and helper scripts include host-modifying setup, cron persistence, and write-capable IAM/API guidance that exceed the read-only framing.
Install only if you are comfortable with an EIP monitoring tool that may install local dependencies, create audit logs, and optionally add a cron job. Use the minimum read-only IAM policy only; do not grant the full-management policy for this skill. Avoid the curl-to-bash installer path unless you independently verify the installer source, and review any --fix or --setup-cron command before running it.
The documentation claims a read-only cloud analysis skill, yet it includes dependency installation, environment remediation, and auto-fix flows that modify the local system. This misrepresentation can cause operators to authorize execution in sensitive environments where host modification is not acceptable.
The documentation claims a read-only cloud analysis skill, yet it includes dependency installation, environment remediation, and auto-fix flows that modify the local system. This misrepresentation can cause operators to authorize execution in sensitive environments where host modification is not acceptable.
The documentation claims a read-only cloud analysis skill, yet it includes dependency installation, environment remediation, and auto-fix flows that modify the local system. This misrepresentation can cause operators to authorize execution in sensitive environments where host modification is not acceptable.
Piping a remote script directly from curl into bash executes unverified code from the network with no integrity check, review, or pinning. In an agent or automation environment, that creates a strong supply-chain compromise path where a tampered server, MITM, or replaced script leads to arbitrary code execution.
# Linux/macOS one-click install
curl -sSL https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh | bash
# Verify installation
hcloud --version
The command chains network retrieval directly into shell execution, eliminating any opportunity to inspect content before it runs. This pattern is especially dangerous in skills because it can be reused as a one-step arbitrary code execution primitive under the guise of dependency setup.
# Linux/macOS one-click install
curl -sSL https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh | bash
# Verify installation
hcloud --version
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Referenced artifact was not completely inspected
- `scripts/list_eips.sh` - List all EIPs in a region (supports filtering and summary)
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
curl -sSL -o /tmp/hcloud_install.sh https://hwcloudcli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh
bash /tmp/hcloud_install.sh
rm -f /tmp/hcloud_install.sh
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
curl -sSL -o /tmp/hcloud_install.sh https://hwcloudcli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh
bash /tmp/hcloud_install.sh
rm -f /tmp/hcloud_install.sh
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
rm -f /usr/local/bin/hcloud
rm -rf ~/.hcloud
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
rm -f /usr/local/bin/hcloud
rm -rf ~/.hcloud
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
rm -f /usr/local/bin/hcloud
rm -rf ~/.hcloud
The skill metadata explicitly states a read-only analysis-only scope, but this document declares and distributes a full-management permission set including create, delete, update, associate, and disassociate actions. This creates a clear scope mismatch that can enable destructive or costly changes if the skill, a downstream agent, or a compromised operator follows the broader policy instead of the stated intent.
The listed capabilities allow creation, deletion, modification, and rebinding of EIPs, none of which are justified by a cost-reporting and audit skill advertised as non-mutating. If granted, these permissions could be abused to release public IPs, alter network exposure, or incur additional cloud costs, turning a read-only helper into an infrastructure-changing actor.
The skill is explicitly described as read-only analysis only, but this code can download, chmod, and execute an installation script when --fix is used. Even with a minimal grep-based check, executing remotely fetched code introduces a strong supply-chain and arbitrary code execution risk that exceeds the declared scope.
The code downloads a shell script from a remote URL and executes it locally. The presence of only a non-empty-file check and a grep for the string 'hcloud' is not meaningful integrity verification, so a compromised host, mirror, or network path could deliver malicious code for execution.
The script invokes apt-get/yum to install jq and bc, which modifies the local system and violates the skill's stated read-only boundary. This expands the skill from inspection into system mutation, creating unnecessary privilege and integrity risk if run in sensitive environments.
The script implements local crontab installation even though the skill is described as read-only analysis only. This breaks the stated trust boundary by persisting execution on the host, creating unauthorized scheduler modification and ongoing execution capability beyond simple EIP inspection.
No suspicious patterns detected.