ClawHub
Back to skill

Security audit

Alibabacloud Ram Permission Diagnose

Security checks across malware telemetry and agentic risk

Overview

This skill is coherent for Alibaba Cloud permission repair, but it needs review because it can alter local CLI setup and make high-impact cloud access-control changes.

Install only after reviewing the setup steps. Use a dedicated least-privileged Alibaba Cloud profile, avoid the remote installer and automatic plugin updates unless you intentionally approve them, inspect every RAM policy or trust-policy change before execution, keep rollback details and policy backups, and verify Aliyun CLI AI-mode and auto-plugin settings after use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
92% confidence
Finding
The reference goes beyond diagnosis into active IAM repair, including attaching policies, creating custom policies, updating role trust policies, and creating service-linked roles. In an agent skill that is supposed to trigger proactively on permission errors, these commands materially increase the chance the agent will perform privilege-changing actions rather than staying in a read-only diagnostic mode.

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The documented capabilities include destructive and privilege-altering IAM actions such as detach, delete-policy-version, delete-policy, update-role trust policies, and role creation. Because the skill is framed as an assistant for fixing permission issues, an agent could use these commands to expand access or break existing access paths without adequate safeguards, making this dangerous in practice.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The policy deletion section documents deletion of policy versions and entire custom policies without warning that this can immediately revoke access for dependent users and roles. In a permission-repair context, an agent or operator may treat these as normal remediation steps and accidentally cause outages or lockouts.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The trust policy update instructions tell the operator to add caller ARNs to the role trust policy, which directly changes who can assume the role and can enable privilege escalation if applied too broadly or to the wrong principal. The lack of an explicit privilege-risk warning is especially dangerous because this skill is designed to react automatically to permission failures, making overbroad access expansion more likely.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.