Security audit

Alibabacloud Dts Task Manager

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a real Alibaba Cloud DTS management skill, but it needs review because it can create or delete billable cloud tasks and handles database secrets in ways that are not fully scoped or disclosed.

Review this skill before installing in production. Use a narrowly scoped RAM role instead of full DTS access, confirm every billable or destructive action, and avoid supplying high-value database passwords or private keys unless you accept that they may be passed through the local CLI process and Alibaba Cloud DTS APIs.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: references/create-task.md:148
Finding: Sensitive database credentials and private-key material exposed through command-line arguments
Content: View full analysis
\ --DtsInstanceId \ --DtsJobId \ --DtsJobName "" \ --JobType \ --SourceEndpointInstanceType \ --SourceEndpointEngineName \ --SourceEndpointRegion \ --SourceEndpointInstanceID "" \ --SourceEndpointUserName "" \ --SourceEndpointPassword '' \ --DestinationEndpointInstanceType \ --DestinationEndpointEngineName \ --DestinationEndpointRegion \ --DestinationEndpointIP "" \ --DestinationEndpointPort "" \ --DestinationEndpointUserName "" \ --DestinationEndpointPassword '' \ ``` ### Technical Analysis Shell single quoting prevents expansion of metacharacters, but it does not protect the confidentiality of process arguments. The database passwords and any PEM-encoded client private key become part of the argument vector of the `aliyun` process. Depending on host configuration and execution tooling, process argumen ...[truncated 1736 chars]
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Note

Location: references/ram-policies.md:3
Finding: Full DTS cloud-access policy recommended instead of least privilege
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The metadata description advertises automatic triggering on broad phrases like "create migration," "new DTS," "migration status," and similar variants, some of which overlap with ordinary admin or database discussions. In this context, over-broad autotriggering is risky because the skill is capable of executing real Alibaba Cloud DTS operations, including resource creation and deletion, making mistaken activation materially harmful.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill routes on highly generic terms such as "create," "new," "migration," "list," "view," and "status," which can easily appear in unrelated conversations. Because this skill can perform cloud control-plane actions like creating, suspending, or deleting DTS tasks, accidental invocation could lead to unintended operational changes, charges, or disclosure of infrastructure metadata.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill directs the agent to collect database usernames/passwords and then create/configure DTS instances via Alibaba Cloud APIs, which can provision billable resources and transmit highly sensitive credentials off-host. While the workflow masks secrets in output, it does not require an explicit user warning/confirmation about billing impact or credential transmission, increasing the risk of unintended charges and unsafe secret handling during interactive use.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.