Security audit

Huawei Cloud Cce Change Impact Analyzer

Security checks for vulnerabilities and agentic risk

Overview

This skill presents itself as read-only analysis, but its shipped dispatcher exposes many cloud and Kubernetes mutation actions that could alter or delete production resources.

Treat this as needing manual review before installation. Only use it with tightly scoped read-only Huawei Cloud credentials and Kubernetes RBAC, and do not install it in an environment where the skill can invoke its bundled dispatcher with write-capable credentials unless the package is split or allowlisted to the documented read-only actions.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (4)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/huawei_cloud/dispatcher.py:1447
Finding: Read-only Skill exposes undeclared destructive cloud operations
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_cloud/cce.py:1119
Finding: Kubernetes API server certificate verification is disabled
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_cloud/network.py:670
Finding: Signed Huawei Cloud API request disables TLS verification
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/huawei_cloud/cce.py:1160
Finding: Kubernetes client private keys are written through unsafe temporary paths
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (423)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 94% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Inspecting current node security-group configuration for a single node is much narrower than the promised comprehensive, historical, multi-source change-impact report. The danger is not direct exploitation so much as false confidence and unnecessary exposure of IAM/ECS/VPC access under a misleading product description.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal, suspicious.insecure_tls_verification

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: scripts/huawei_cloud/cce_nodepool.py:456

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: scripts/huawei_cloud/network.py:781

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: scripts/huawei_cloud/storage.py:416