huawei-cloud-mrs-hdfs-performance-issue-analysis

• Outcome: Pass
• Latest audit: Sep 29, 2026 · 3:15 AM UTC
• Version: 1.0.0

Overview

This skill is a coherent HDFS performance diagnostic that analyzes local logs and generates local reports, with no evidence of hidden network access, credential collection, persistence, or destructive automation.

Install only if you are comfortable giving the agent access to HDFS operational logs and audit logs, which may contain usernames, paths, and cluster details. Keep the generated reports local unless reviewed, and treat repair steps such as restarts, balancer changes, or configuration changes as human-approved operational actions rather than automatic commands.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 5)May include surrounding context.

md

Built-in Python analyzer (`scripts/hdfs_perf_analyze.py`) extracts omaplugin metrics, slow RPC, audit log requests, TopUser operations, and Block Report statist

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 18)May include surrounding context.

md

Built-in Python analyzer (`scripts/hdfs_perf_analyze.py`) extracts omaplugin metrics, slow RPC, audit log requests, TopUser operations, and Block Report statist

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 80)May include surrounding context.

md

Built-in Python analyzer (`scripts/hdfs_perf_analyze.py`) extracts omaplugin metrics, slow RPC, audit log requests, TopUser operations, and Block Report statist

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 236)May include surrounding context.

md

Built-in Python analyzer (`scripts/hdfs_perf_analyze.py`) extracts omaplugin metrics, slow RPC, audit log requests, TopUser operations, and Block Report statist

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 449)May include surrounding context.

md

Built-in Python analyzer (`scripts/hdfs_perf_analyze.py`) extracts omaplugin metrics, slow RPC, audit log requests, TopUser operations, and Block Report statist

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence

Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 60% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 393)May include surrounding context.

md

| Slow Type | Meaning |
| --------- | ------- |
| Slow BlockReceiver write packet to mirror | Network write block latency |
| Slow BlockReceiver write data to disk cost | Block write to OS cache or disk latency |
| Slow flushOrSync | Block write to OS cache or disk latency |
| Slow manageWriterOsCache | Block write to OS cache or disk latency |

Static analysis

No suspicious patterns detected.