Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Alibabacloud Cms Alert Rule Create

v0.0.1

Create Alibaba Cloud CMS alert rules via CLI (write-operation skill). Supports CMS 1.0 cloud resource monitoring for ALL CMS-integrated cloud products. This...

0· 20·0 current·0 all-time
byalibabacloud-skills-team@sdk-team
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Skill purpose (create CMS alert rules) matches the instructions and the included RAM permissions document. However the registry metadata lists no required binaries or primary credential while the runtime relies heavily on the `aliyun` CLI and valid Alibaba Cloud credentials/permissions (cms:PutResourceMetricRule, PutContact, etc.). The capability itself is coherent for alert creation, but the metadata omission is inconsistent.
Instruction Scope
SKILL.md provides a constrained, stepwise workflow limited to CloudMonitor APIs (describe-project-meta, describe-metric-meta-list, describe-contact-group-list, put-resource-metric-rule, etc.). It mandates explicit user confirmation before write, avoids hardcoding metrics (calls describe-metric-meta-list), and restricts allowed network targets to Alibaba domains. The included script only validates parameters and (optionally) calls the aliyun CLI to check contact group existence — this is within the stated purpose.
Install Mechanism
No install spec is provided (instruction-only), so nothing will be fetched or executed automatically on install. The skill includes a helper script (validate-params.sh) which will run locally if invoked; this script is readable and not obfuscated. Low install risk, but runtime requires local tooling (aliyun CLI, bc, uuidgen) that are not declared in metadata.
!
Credentials
The skill is a write-operation that requires IAM permissions to create alerts, contacts, and contact groups, but the package does not declare a primary credential or required environment variables. There is no mention in metadata that the user must supply Alibaba credentials or where they must be configured. That omission is disproportionate: the skill should declare that it requires configured Alibaba Cloud credentials (or an API key) and the minimal RAM actions required (which are documented in references/ram-policies.md).
Persistence & Privilege
The skill does not request permanent platform presence (always: false) and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but not combined here with other high-risk flags.
What to consider before installing
This skill appears to implement exactly what it claims (creating Alibaba Cloud CMS alert rules) and includes a parameter validator script and a clear step-by-step workflow. However, before installing or running it: 1) be aware the skill requires the Alibaba `aliyun` CLI and valid Alibaba Cloud credentials with write permissions (cms:PutResourceMetricRule, cms:PutContact, cms:PutContactGroup, etc.); those are not declared in the metadata — confirm you have the CLI and credentials configured locally (or the agent environment) and use least-privilege RAM policies. 2) Review references/ram-policies.md and only grant the listed permissions to the principal this skill will use. 3) Note the workflow often uses --resources '[{"resource":"_ALL"}]' which scopes alerts to all resources in a product/region — confirm you want that broad scope. 4) The included validate-params.sh will attempt to run `aliyun cms describe-contact-group-list` (if `aliyun` is present) to verify contact groups; run the script manually to inspect behavior first. 5) Because the package metadata omitted required binaries/credentials, treat this as a metadata quality issue (likely accidental) — if you need high assurance, ask the publisher to update the metadata to declare required binaries and the primary credential, or run the skill in a controlled environment with limited permissions.

Like a lobster shell, security has layers — review code before you run it.

latestvk971595g33daaa2scc5m6kyta184e9tq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments