Security audit

Huawei Cloud Cce Dependency Impact Analyzer

Security checks for vulnerabilities and agentic risk

Overview

The skill presents itself as read-only impact analysis, but its bundled dispatcher exposes destructive CCE and Kubernetes operations plus risky credential handling.

Review this skill before installing. Use only narrowly scoped read-only Huawei Cloud IAM and Kubernetes RBAC credentials, and do not expose production write-capable credentials to its dispatcher unless the package is changed to remove or block all mutation and secret-export actions.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (5)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/huawei_cloud/dispatcher.py:1469
Finding: Read-only Skill exposes destructive Huawei Cloud administration actions
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/huawei_cloud/auto_remediation.py:150
Finding: Auto-remediation action can replace production Deployment templates
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_cloud/network.py:670
Finding: TLS certificate verification is disabled for authenticated cloud and Kubernetes requests
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_cloud/cce_k8s.py:55
Finding: Kubernetes client private keys are written to predictable temporary files
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_get_node_security_groups.py:136
Finding: Standalone helper transmits an access-key identifier as an IAM authentication token
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (430)

Description-Behavior Mismatch

Critical

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The file exposes extensive destructive and administrative capabilities such as deleting clusters, deleting nodes, scaling workloads, hibernating clusters, and modifying networking, which are far beyond the stated purpose of dependency-impact analysis. In an analysis-focused skill, these write operations materially increase blast radius and create a path for accidental or unauthorized destructive actions under the guise of diagnostics.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Critical

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The secret-listing function can enumerate Kubernetes Secrets and optionally return their raw data, which is unrelated to dependency-impact analysis and directly enables credential/material disclosure. Because Secrets often contain tokens, passwords, certificates, and keys, this creates a high-value exfiltration path.
Content: No source excerpt is available for this finding.

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · SKILL-CN.md (reported line 1)May include surrounding context.
md
--- name: dependency-impact-analyzer description: Use this skill when a Huawei Cloud CCE incident needs service topology impact analysis, including Service/Ingress/Pod/Node propagation paths, upstream/downstream blast radius, affected entrypoints, and a complete Markdown impact report with evidence and confidence limits. ---

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 96% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Inspecting node security groups and VPC rules is outside the declared Service/Ingress/Pod/Node dependency-reporting scope. This is another overprivilege indicator that can reveal infrastructure security posture while users believe they are running a narrowly targeted analyzer.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal, suspicious.insecure_tls_verification

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: scripts/huawei_cloud/cce_nodepool.py:456

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: scripts/huawei_cloud/network.py:781

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: scripts/huawei_cloud/storage.py:416