Security audit

alibabacloud-ebs-usage-summary

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a read-only Alibaba Cloud EBS reporting helper, but its setup guidance expands into persistent CLI/plugin changes and broad credential configuration beyond that narrow purpose.

Install only if you are comfortable letting the skill modify Aliyun CLI plugin behavior and use an already-scoped Alibaba Cloud profile. Prefer a least-privilege RAM user or role with only the listed read-only permissions, avoid entering access keys in the agent session, and review any CLI/plugin installation or update before allowing it.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Context-Inappropriate Capability

Medium

Confidence: 90% confidence
Finding: The skill directs the agent to change local CLI behavior by enabling automatic plugin installation and forcing plugin updates, which modifies the user's environment rather than merely reading cloud telemetry. That expands the trust boundary to code fetched from plugin sources and can introduce unreviewed local changes or supply-chain risk unrelated to the core read-only analytics task.

Description-Behavior Mismatch

High

Confidence: 95% confidence
Finding: This file provides a full Alibaba Cloud CLI installation and configuration playbook, which materially exceeds an EBS analytics skill's stated purpose. Expanding user setup into general-purpose CLI enablement increases attack surface by equipping the agent or user to authenticate, install plugins, and operate outside the narrow EBS monitoring scope.

Context-Inappropriate Capability

High

Confidence: 97% confidence
Finding: The guide instructs users to provision and store powerful cloud credentials across multiple authentication modes, including long-lived access keys and role assumption patterns, despite the skill being scoped to analytics. In this context, unnecessary credential handling is dangerous because it normalizes broad cloud access and creates opportunities for credential exposure, misuse, or privilege expansion beyond read-only EBS reporting.

Context-Inappropriate Capability

Medium

Confidence: 91% confidence
Finding: Promoting installation of arbitrary Alibaba Cloud plugins and general command exploration broadens the skill from EBS analytics into a general cloud operations entry point. That is risky because it encourages capability expansion unrelated to the declared purpose, making misuse or overreach more likely in an agent-driven environment.

Intent-Code Divergence

Medium

Confidence: 82% confidence
Finding: The verification section claims the smoke test needs no extra RAM action, but the broader document enables expansive CLI configuration and capability growth. This mismatch can mislead users into believing the overall workflow is narrowly scoped and safe, when in reality it establishes a broader authenticated CLI environment that could be used for much more than validation.

Static analysis

No suspicious patterns detected.