Security audit

Alibabacloud Network Alb Http To Https

Security checks across malware telemetry and agentic risk

Overview

This skill mostly does disclosed Alibaba Cloud ALB HTTPS-redirect work, but it also exposes broader traffic-rule actions that can reroute or block live service traffic.

Install only if you intend to let an agent make ALB and certificate-management changes in the selected Alibaba Cloud account. Use least-privilege RAM permissions, verify every listener/rule/server-group/certificate ID, run dry-run modes first, avoid self-signed certificates in production, and do not use the ForwardGroup or FixedResponse options unless you explicitly want broader ALB traffic management.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (10)

Description-Behavior Mismatch

High

Confidence: 97% confidence
Finding: This script materially exceeds the skill’s stated purpose of enforcing HTTP-to-HTTPS redirects by exposing a generic ALB rule creation interface with redirect, forward-group, and fixed-response capabilities. In an agent skill context, this overbroad capability enables unintended traffic rerouting or service disruption if invoked with attacker-influenced parameters, making the mismatch between documented intent and actual privilege especially dangerous.

Context-Inappropriate Capability

High

Confidence: 99% confidence
Finding: Allowing arbitrary --forward-sg input gives this skill the power to reroute ALB traffic to any server group, which is unrelated to HTTPS enforcement and significantly expands blast radius. In a security automation or agent setting, this can be abused to redirect production traffic to unintended backends, causing data exposure, outages, or interception.

Context-Inappropriate Capability

Medium

Confidence: 94% confidence
Finding: Fixed-response rule creation lets the skill return arbitrary HTTP responses, which is outside the advertised purpose of HTTPS redirect enforcement. That capability can be used to block application functionality or create denial-of-service conditions by matching broad paths or methods and returning error responses.

Intent-Code Divergence

Medium

Confidence: 91% confidence
Finding: The header explicitly presents the file as a generic ALB forwarding-rule tool, which contradicts the skill’s documented purpose and signals capability creep. In agent-operated environments, such misleading framing increases the risk that reviewers or orchestration logic will trust and invoke a broader, more dangerous tool than intended.

Description-Behavior Mismatch

High

Confidence: 97% confidence
Finding: This script performs certificate replacement on existing HTTPS/QUIC listeners, which is materially different from the advertised skill purpose of enforcing HTTP-to-HTTPS redirects. That capability enables modification of live TLS identity and traffic termination behavior, expanding the blast radius from redirect configuration to potentially disruptive or deceptive certificate changes on production services.

Context-Inappropriate Capability

Medium

Confidence: 94% confidence
Finding: The update path actively changes the bound default certificate and verifies the change, even though certificate management is not justified by a redirect-enforcement workflow. In the context of this skill, this hidden or unrelated capability increases the chance of accidental service disruption, TLS misconfiguration, or unauthorized certificate swaps because users invoking a redirect skill would not reasonably expect certificate mutation.

Description-Behavior Mismatch

High

Confidence: 93% confidence
Finding: The script adds certificate-management functionality to a skill whose declared purpose is limited to configuring HTTP-to-HTTPS redirects. That scope expansion is security-relevant because it introduces handling of highly sensitive private key material and enables permanent account-level changes beyond redirect configuration, increasing the blast radius if the skill is invoked unexpectedly or by an over-privileged agent.

Context-Inappropriate Capability

Medium

Confidence: 88% confidence
Finding: The output explicitly encourages using the uploaded certificate with listener creation, reinforcing that the skill performs certificate lifecycle actions not justified by its advertised redirect-enforcement role. This mismatch can mislead operators into granting broader permissions or invoking the skill in contexts where they did not intend certificate import, which is dangerous because certificate operations involve sensitive assets and persistent infrastructure changes.

Missing User Warnings

Medium

Confidence: 85% confidence
Finding: The rollback section includes destructive `delete-rule` and `delete-listener` commands without an explicit warning, safety prechecks, or a requirement for interactive confirmation. In a live ALB environment, accidental execution could remove production listeners or routing rules and cause service disruption or outage.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The script reads the private key into a shell variable and passes it to the CLI without any explicit warning, minimization, or protective controls around sensitive credential handling. Private keys are highly sensitive secrets; mishandling them can lead to certificate compromise, impersonation, and exposure via shell debugging, process inspection, logs, crash dumps, or accidental output handling in surrounding automation.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.