Security audit

alibabacloud-pcap-analyzer

Security checks for vulnerabilities and agentic risk

Overview

This local network diagnostic skill needs review because saving a report can accidentally overwrite the capture it promises to preserve.

Keep a backup of the capture. Until output safeguards are added, use stdout or a new, separate report file that cannot link to existing data. Run analysis without administrator privileges, and review network-changing recommendations before applying them. Reports can contain private IP addresses and domain names.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (7)

Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: file_write, network.

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.
md
The analyzer needs a pcap/pcapng file the user already has. When the user has not captured one yet, hand them these commands; never run them on the user's behalf: - Linux: `sudo tcpdump -i any -w capture.pcap` (narrow it with `host <IP> and port <PORT>` when the scope is known) - macOS: `sudo tcpdump -i en0 -w capture.pcap` - Windows: Wireshark -> select the interface -> Start -> Stop -> Save as `.pcapng`

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.
md
The analyzer needs a pcap/pcapng file the user already has. When the user has not captured one yet, hand them these commands; never run them on the user's behalf: - Linux: `sudo tcpdump -i any -w capture.pcap` (narrow it with `host <IP> and port <PORT>` when the scope is known) - macOS: `sudo tcpdump -i en0 -w capture.pcap` - Windows: Wireshark -> select the interface -> Start -> Stop -> Save as `.pcapng` Ask for the capture point and the time window when the problem is intermittent; a capture that does not include the failure window cannot support a conclusion.

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/pcap_analyze.py (reported line 1391)May include surrounding context.
python
lines.append("**Linux**:") lines.append("```bash") lines.append("# Temporary change (lost after reboot)") lines.append("sudo ip link set dev <interface> mtu 1400") lines.append("") lines.append("# Permanent change (edit the NIC configuration file)") lines.append("# /etc/sysconfig/network-scripts/ifcfg-<interface>, add:")

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · scripts/pcap_analyze.py (reported line 1409)May include surrounding context.
python
lines.append("**Linux**:") lines.append("```bash") lines.append("# Force the MSS via iptables (suitable for NAT/VPN scenarios)") lines.append("sudo iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN " "-j TCPMSS --set-mss 1360") lines.append("```") lines.append("")

The report output can overwrite the input capture despite the explicit promise never to modify it.

Medium

Category: Excessive Agency
Confidence: 99% confidence
Finding: The output path is opened in write mode without checking whether it identifies the input capture, so specifying the capture itself—or a symlink or hard link to it—as --output truncates and replaces the capture with Markdown. This contradicts the read-only guarantee and can destroy valuable diagnostic or forensic evidence, although it requires an unsafe output-path selection rather than capture contents alone.
Content: No source excerpt is available for this finding.

Unverifiable Dependency: scapy has 3 known advisory(ies) (GHSA-cq46-m9x9-j8w2 (Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickl); CVE-2019-1010142 (Infinite Loop in scapy); CVE-2019-1010142 (scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, res)), but the manifest does not pin a version, so it is unknown whether the installed release is affected

Low

Category: Supply Chain
Confidence: 40% confidence
Finding: OSV returned advisories for this package, but its resolved version is unknown. A package-name lookup does not establish whether the installed release is affected by those advisories.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.