ClawHub
Back to skill

Security audit

alibabacloud-cloud-native-internet-diagnostics

Security checks for vulnerabilities and agentic risk

Overview

This skill performs disclosed read-only Alibaba Cloud egress diagnostics, with a small local identity-metadata cache users should be aware of.

Install only if you are comfortable letting the skill use your existing aliyun CLI session to read the named cloud resource, its VPC/vSwitch, NAT/SNAT configuration, and caller identity metadata. Be aware it may persist AccountId, Arn, and IdentityType locally in scripts/.sts_cache.json, but it does not modify cloud resources or store cloud credentials.

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Tp4

High
Category
MCP Tool Poisoning
Confidence
93% confidence
Finding
The skill is described as a read-only egress diagnostic, but it also performs caller identity inspection, role-detection logic, and local caching to scripts/.sts_cache.json. Even if cloud resources are not modified, this broadens the data collected and persistence behavior beyond what a user may reasonably expect, creating privacy, metadata exposure, and trust-boundary risks if account identity details are stored locally or reused across sessions.

Static analysis

No suspicious patterns detected.