Back to skill

Security audit

huawei-cloud-maas-model-guidance

Security checks for vulnerabilities and agentic risk

Overview

This is a guidance-only Huawei Cloud MaaS skill with some risky setup examples users should handle carefully.

Install only if you intend to use Huawei Cloud MaaS. Prefer package-manager installation over remote pipe-to-shell commands, store API keys carefully, review any cloud IAM permissions before granting them, and do not send sensitive prompts, files, images, or business data to MaaS or third-party tools unless that is acceptable for your use case.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (92)

External Script Fetching

High
Category
Supply Chain
Confidence
99% confidence
Finding

The curl ... | bash pattern causes immediate execution of unreviewed code from a remote server, creating a direct remote code execution risk for users following the documentation. In a developer tooling guide, this is especially dangerous because it normalizes unsafe installation behavior on workstations that may also hold source code and credentials.

Content

Scanner excerpt · references/dev-tools-integration.md (reported line 26)May include surrounding context.

md
### Installation

- Windows: `iwr -useb https://openclaw.ai/install.ps1 | iex` or `npm install -g openclaw@latest` (requires Node.js 22+)
- macOS/Linux: `curl -fsSL https://openclaw.ai/install.sh | bash` or `npm install -g openclaw@latest`

### Configure MaaS API

Agent Config Directory Access

High
Category
Agent Snooping
Confidence
90% confidence
Finding

Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

Content

Scanner excerpt · references/dev-tools-integration.md (reported line 78)May include surrounding context.

md
### Configure MaaS API

Edit `~/.claude/settings.json` (Windows: `C:\Users\<username>\.claude\settings.json`), set the API Key and model name.

### Usage

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger list contains very broad terms such as 'invoke model', 'API Key', 'text generation', 'embedding', and names of popular tools, which can cause the skill to activate for many generic user requests outside its intended scope. Over-broad activation increases the chance that users are steered into cloud-specific guidance unnecessarily, potentially influencing sensitive API, credential, or integration workflows without clear user intent.

Content

No source excerpt is available for this finding.

Unrestricted Tool Access

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.

Content

Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.

md
You are a professional Huawei Cloud MaaS (Model as a Service) assistant responsible for guiding customers to invoke AI models on the MaaS platform. Follow the structured workflow to provide comprehensive invocation guidance.

**This skill only provides invocation guidance, does not execute any commands, and does not require installing Huawei Cloud CLI (hcloud).**

## 1. Overview

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 229)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 230)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 231)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 232)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 240)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 241)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 242)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 243)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 244)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/acceptance-criteria.md (reported line 25)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/acceptance-criteria.md (reported line 26)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/acceptance-criteria.md (reported line 27)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 11)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 12)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 13)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 14)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 69)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 130)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 138)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 139)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-interfaces.md (reported line 149)May include surrounding context.

md
| Interface Type | URL | Description |
|----------|-----|------|
| **MaaS Standard API V2** | `https://api.modelarts-maas.com/v2/chat/completions` | MaaS native interface, supports all features, recommended for new projects |
| **MaaS Standard API V1** | `https://api.modelarts-maas.com/v1/chat/completions` | Legacy interface, no longer evolving, recommend using V2 first |
| **OpenAI Compatible Interface** | `https://api.modelarts-maas.com/openai/v1/chat/completions` | Compatible with OpenAI SDK, convenient for migrating from OpenAI |
| **Anthropic Compatible Interface** | `https://api.modelarts-maas.com/anthropic/v1/messages` | Compatible with Anthropic SDK, convenient for migrating from Claude |