alibabacloud-ebs-disk-snapshot-management

• Outcome: Review
• Latest audit: Jul 30, 2026 · 1:43 PM UTC
• Version: 0.0.1

Overview

The skill is mostly coherent for Alibaba Cloud snapshot management, but it includes one network-troubleshooting instruction that may bypass configured proxy controls in a high-impact cloud-operations context.

Install only if you are comfortable with a cloud-operations skill that can create snapshots and auto-snapshot policies using your Alibaba Cloud CLI profile. Treat deletion and rollback content as guidance only, verify cost and retention settings before creation, and do not allow proxy-clearing retries in environments where network proxy or egress controls are mandatory.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Context-Inappropriate Capability

Medium

• Confidence: 92% confidence
• Finding: The skill instructs modifying proxy-related environment variables to alter network behavior during retries. Even though framed as troubleshooting, this changes execution context outside the skill's stated snapshot-management role and can bypass enterprise egress controls, monitoring, or required proxy enforcement, creating policy and audit gaps.

Context-Inappropriate Capability

Medium

• Confidence: 91% confidence
• Finding: The file is for snapshot management, but it includes a policy that governs instance creation via `ecs:RunInstances` and `ecs:CreateInstance`. Even though the example uses `Deny` rather than `Allow`, it expands the skill’s documented permission scope into broader compute-governance territory, which can mislead operators into granting or depending on permissions outside the intended snapshot-management boundary. In an IAM/policy reference, scope creep is security-relevant because users often copy policies verbatim.

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The trigger set includes broad phrases like general ECS maintenance and backup requests, which can cause unintended invocation on vague cloud-operations prompts. In a skill that can create resources and incur charges, over-broad activation increases the chance of acting in the wrong context or on user requests that did not specifically intend snapshot operations.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The rollback sections document `reset-disk` and `reset-disks` mechanics but do not clearly warn that these operations overwrite current disk state and can cause irreversible data loss if run on the wrong snapshot or without recent backups. In a cloud operations skill, omission of an explicit destructive-action warning is dangerous because users may treat the procedure as routine maintenance rather than a potentially destructive restore operation.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The workflow explicitly instructs operators to delete snapshots as part of cleanup and post-upgrade routines, but it does not include a clear warning that snapshot deletion can permanently remove recovery points and may break rollback expectations if dependencies are misunderstood. In a backup and disaster-recovery skill, omission of irreversible-data-loss warnings is materially risky because users may follow the procedure directly during maintenance or incident response.

VirusTotal

50/50 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.