ClawHub
Back to skill

Security audit

huawei-cloud-mrs-migration-planner

Security checks for vulnerabilities and agentic risk

Overview

This skill uses user-provided cluster details to prepare migration plans and local spreadsheets, with no material security concern found.

Install openpyxl in a Python virtual environment and protect reports containing infrastructure details. Cloud credentials are unnecessary for report generation; confirm sizing and regional availability before implementing the plan.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Direct Prompt Extraction

High
Category
System Prompt Leakage
Confidence
85% confidence
Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · SKILL.md (reported line 92)May include surrounding context.

md
> Full sheet column definitions: [references/excel-report-template.md](references/excel-report-template.md)
> Python script implementation: [scripts/generate_mrs_report.py](scripts/generate_mrs_report.py)

## Output Rules

- **Single-plan output**: Output only 1 final plan (minimum surplus); no dual-plan comparison; no user selection needed
- **Minimum surplus selection**: For each candidate flavor calculate N = max(ceil(V/flavor_vCPU), ceil(M/flavor_memory)), Total_excess = CPU_excess% + Mem_excess%, select the minimum. On tie, select fewer nodes

Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: file_read.

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.