Security audit

Huawei Cloud Cce Pod Failure Diagnoser

Security checks for vulnerabilities and agentic risk

Overview

The skill is advertised as read-only Pod diagnosis, but its included dispatcher can also run broad Huawei Cloud administration and mutation actions, so it needs review before installation.

Install only after reviewing and restricting the action surface. Use a least-privilege Huawei IAM identity limited to the documented read-only diagnostic permissions, avoid production admin credentials, and remove or disable the undocumented mutation, EIP, remediation, and broad infrastructure actions if this is meant to be a Pod diagnosis skill.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (4)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/huawei_cloud/dispatcher.py:1498
Finding: Read-Only Diagnostic Skill Exposes Destructive Cloud Administration Operations
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_cloud/cce.py:1148
Finding: Kubernetes TLS Server Verification Is Explicitly Disabled
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/huawei_cloud/cce.py:1159
Finding: Kubernetes Client Private Keys Are Written Through Race-Prone Temporary Paths
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/huawei_get_node_security_groups.py:136
Finding: Auxiliary Script Accepts Huawei Cloud Passwords and Secret Keys on the Command Line
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (449)

Context-Inappropriate Capability

Critical

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The bind/unbind EIP functions can expose or remove the Kubernetes API server from the public internet, changing the cluster's attack surface. This is a high-risk administrative network action unrelated to pod diagnosis and could directly enable external attack paths or disrupt secure operations.
Content: No source excerpt is available for this finding.

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · SKILL-CN.md (reported line 1)May include surrounding context.
md
--- name: pod-failure-diagnoser description: Use this skill for CCE Pod failures such as CrashLoopBackOff, ImagePullBackOff, OOMKilled, Pending, Evicted, restart storms, or workload unavailable. ---

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 93% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 96% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 92% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 95% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 94% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: Querying ECS instances by node IP and retrieving node security group configuration reaches into underlying VM and network security posture, which is outside pod diagnosis. This exposes sensitive infrastructure details and broadens cloud credential utility beyond the manifest's stated purpose.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal, suspicious.insecure_tls_verification

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: scripts/huawei_cloud/cce_nodepool.py:456

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: scripts/huawei_cloud/network.py:781

HTTPS certificate verification is disabled.

Warn

Code: suspicious.insecure_tls_verification
Location: scripts/huawei_cloud/storage.py:416