Security audit
Security checks for vulnerabilities and agentic risk
Review before installing: this skill treats cluster login credentials as ordinary data and can execute an unverified installer when its CLI is missing.
Require an explicit request for credentials for a specific cluster, restrict their permissions and lifetime, and keep returned kubeconfigs out of chat and logs. Preinstall a verified CLI release and review or disable its automatic skill synchronization. The connector implementation and remote installers are outside the bundle and remain unverified. The artifact supports Review for insufficient credential controls and automatic installation, without evidence establishing malicious intent.
The supplied chunk executes an external installer and contains no ACK search or read operations. Nothing shown establishes that this installer is a supporting dependency for ACK access. Its installation and remote-code-execution behavior is not represented by the declared purpose. The downloaded script is not supplied, so its specific effects cannot be determined.
Kubeconfig retrieval is a legitimate ACK capability, but this skill permits it under a blanket rule that untagged reads are safe and provides no credential-specific output-handling safeguards. A returned kubeconfig may contain usable authentication material, so careless display, persistence, or logging could expose cluster access; actual permissions depend on the returned credentials.
## Available actions
- `get_temporary_kubeconfig` — Generate a short-lived kubeconfig for an Alibaba Cloud Container Service for Kubernetes (ACK) cluster.
## Safety
This duplicates the credential-handling finding at the same location rather than identifying a separate exploit. The concern is not the word kubeconfig itself, but the combination of sensitive credential retrieval, automatic-read authorization, and missing secret-output protections.
## Available actions
- `get_temporary_kubeconfig` — Generate a short-lived kubeconfig for an Alibaba Cloud Container Service for Kubernetes (ACK) cluster.
## Safety
The command pipes mutable remote content directly into Bash, giving the installation endpoint code-execution authority on the agent's host. HTTPS protects transport but does not establish that the script is safe or unchanged; endpoint compromise could expose local files and credentials accessible to the process.
oo: command not found — install the oo CLI (other platforms: https://cli.oomol.com/install-guide.md):
curl -fsSL https://cli.oomol.com/install.sh | bash # macOS / Linux
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Resources
- Alibaba Cloud ACK homepage: https://www.alibabacloud.com/product/kubernetes
- API documentation: https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/developer-reference/api-cs-2015-12-15-describeclusteruserkubeconfig
The only advertised action retrieves a temporary cluster credential, but the safety rules classify every untagged action as a read that is safe to run directly. This conflates ordinary data retrieval with access to authentication material and can lead an agent to obtain cluster credentials without explicit authorization for that sensitive operation.
Both setup examples execute downloaded scripts immediately, without a pinned version or independent integrity verification. Although setup is conditional on a missing CLI, that condition does not prevent a compromised installation endpoint from executing arbitrary code with the agent process's permissions.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- **`OOMOL_INSUFFICIENT_CREDIT`** — OOMOL billing stop. Recharge at `https://console.oomol.com/billing/token-recharge` before retrying.
- **HTTP 402 without `OOMOL_INSUFFICIENT_CREDIT`** — the third-party account itself has no active plan or credit. Report the provider error message as is; do not ask the user to recharge OOMOL.
## Resources