ClawHub
Back to skill

Security audit

Alibabacloud Cas Ssl Cert Purchase

Security checks across malware telemetry and agentic risk

Overview

The skill is a disclosed Alibaba Cloud SSL certificate purchase and application workflow with explicit confirmation gates, though users should be careful with its billing authority and setup guidance.

Install only if you intend the agent to manage Alibaba Cloud SSL certificates and potentially purchase certificate instances. Confirm profile, region, domain, CA, duration, and cost before approving any purchase or application. Avoid piping remote installers directly to a shell, and do not place AccessKey secrets in chat, shell history, or logged command lines.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
83% confidence
Finding
The trigger phrases are broad enough to activate on generic certificate-related requests, which can route users into a workflow capable of billing-impacting and certificate-management actions. In this context, overbroad activation increases the risk of unintended purchases, instance changes, or unnecessary credentialed cloud API interactions if the surrounding agent matches loosely.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The guide recommends executing a remote script directly via curl-to-bash, which bypasses local inspection and integrity verification of the downloaded content. If the hosting endpoint, CDN, DNS, TLS termination, or script supply chain is compromised, users could execute arbitrary code immediately on their systems.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The examples show AccessKey ID and AccessKey Secret being supplied directly on the command line, which can expose secrets through shell history, process listings, CI logs, and terminal recordings. In an automation-focused skill, this is especially risky because users may copy these commands into shared or logged environments.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.