ClawHub
Back to skill

Security audit

Alibabacloud Maxcompute Migration Service

Security checks across malware telemetry and agentic risk

Overview

This skill mostly matches its migration purpose, but its first-run setup asks users to run remote installer and auto-update plugin commands in a high-impact cloud administration context.

Install only in a controlled admin environment. Prefer package-manager or internally approved Aliyun CLI/plugin versions, avoid curl-to-bash installers unless your organization trusts and verifies that channel, disable or review automatic plugin installation where possible, and use least-privilege, preferably short-lived credentials for the specific migration scope.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The guide recommends executing a remotely fetched shell script directly via curl piped to bash. This bypasses review, integrity verification, and provenance checks, so a compromised host, CDN, DNS path, or upstream script could immediately execute arbitrary code on the user's machine. In the context of an installation guide for an operational migration skill, this is more dangerous because users are likely to run it on privileged admin workstations that also hold cloud credentials.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The configuration examples normalize use of long-lived access keys and environment variables containing secrets without any warning about secure handling, least privilege, or safer alternatives. This increases the chance of credential leakage through shell history, process inspection, screenshots, copied commands, or persistence in developer environments. In a migration/admin CLI context, exposed keys could grant broad access to data migration and cloud resources.

Self-Modification

High
Category
Rogue Agent
Content
- **Aliyun CLI (first-run only) — version `>= 3.3.3` required**: run `aliyun version` to verify. If not installed or the version is too low:
  - run `/bin/bash -c "$(curl -fsSL https://aliyuncli.alicdn.com/setup.sh)"` to install or update, or
  - run `aliyun upgrade` (available from CLI >= 3.3.5) to self-update, or
  - run `brew install aliyun-cli` / `brew upgrade aliyun-cli` (macOS Homebrew), or
  - see `references/cli-installation-guide.md` for full installation instructions.
  Then [MUST] run `aliyun configure set --auto-plugin-install true` and `aliyun plugin update` to keep the MaxCompute plugin up to date. Do not repeat setup steps in normal migration workflows.
Confidence
95% confidence
Finding
self-update

Self-Modification

High
Category
Rogue Agent
Content
> **Aliyun CLI 3.3.3+**: Supports installing and using all published Alibaba Cloud product plugins. Make sure to upgrade to 3.3.3 or later for full plugin ecosystem coverage.
>
> Quickest install/update: `/bin/bash -c "$(curl -fsSL https://aliyuncli.alicdn.com/setup.sh)"`, or `aliyun upgrade` (available from CLI >= 3.3.5) to self-update.

## Installation
Confidence
88% confidence
Finding
self-update

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.