ClawHub
Back to skill

Security audit

Alibaba Cloud STS

Security checks across malware telemetry and agentic risk

Overview

This skill is purpose-aligned for Alibaba Cloud STS, but it can generate temporary cloud credentials while describing those actions as safe read-style operations.

Install only if you trust OOMOL and intend to let the agent request Alibaba Cloud temporary credentials through your connected account. Treat outputs as secrets, verify the requested role/scope before use, and prefer a verified oo CLI installation method over pipe-to-shell setup commands.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The manifest and description frame the skill as suitable for 'searching and reading data,' but the actual actions mint temporary STS credentials. This misclassification can cause an agent or user to treat credential-issuing operations as low-risk read actions, increasing the chance of unauthorized credential generation and downstream access to Alibaba Cloud resources.

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The safety section claims untagged actions are reads, yet both documented untagged actions return temporary credentials. This is dangerous because credentials are sensitive security artifacts, not passive read results; presenting them as safe to run directly can bypass confirmation safeguards and enable privilege acquisition.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger text says to use this skill for ANY Alibaba Cloud STS request whenever a task involves STS, which is overly broad for a capability that can mint temporary credentials. Broad routing language increases the likelihood that an agent will invoke the skill in contexts where credential issuance is unnecessary or insufficiently reviewed.

External Script Fetching

High
Category
Supply Chain
Content
- **`oo: command not found`** — install the oo CLI (other platforms: <https://cli.oomol.com/install-guide.md>):

  ```bash
  curl -fsSL https://cli.oomol.com/install.sh | bash    # macOS / Linux
  ```

  ```powershell
Confidence
98% confidence
Finding
curl -fsSL https://cli.oomol.com/install.sh | bash

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.