ClawHub
Back to skill

Security audit

Alibabacloud Sase Pa Network Diagnosis

Security checks across malware telemetry and agentic risk

Overview

The skill’s SASE diagnosis purpose is legitimate, but its setup materials grant broader cloud CLI and plugin authority than the diagnosis workflow needs.

Install only after reviewing the setup steps carefully. Use a dedicated least-privilege RAM profile with only the listed csas diagnosis permissions, avoid pasting AK/SK secrets into commands or chat, prefer a verified package-manager or signed installer path over pipe-to-shell, and consider disabling automatic Aliyun plugin installation after use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
This guide goes well beyond the stated SASE PA network diagnosis scope and teaches users how to configure general-purpose Alibaba Cloud CLI authentication, role assumption, ECS access, and plugin usage. In an agent skill context, that materially expands available capabilities and may enable unnecessary access to unrelated cloud resources if users or automation follow the instructions verbatim.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The document explicitly enables access to unrelated cloud services and encourages installation of broad product plugins, which is not justified by a PA network diagnosis skill. In practice, this increases the blast radius of the skill by normalizing expanded CLI reach into other Alibaba Cloud services beyond the intended troubleshooting function.

External Script Fetching

High
Category
Supply Chain
Content
> **Pre-check: Aliyun CLI >= 3.3.3 required**
> Run `aliyun version` to verify >= 3.3.3. If not installed or version too low,
> run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update,
> or see [references/cli-installation-guide.md](references/cli-installation-guide.md) for installation instructions.

> **Pre-check: Aliyun CLI plugin update required**
Confidence
98% confidence
Finding
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.