Back to skill

Security audit

Cloudforge Automation Free

Security checks across malware telemetry and agentic risk

Overview

This skill is a cloud infrastructure automation guide, but it includes high-impact Terraform deployment and destruction flows without enough confirmation or safety boundaries.

Review this skill carefully before installing. Use it only with least-privilege cloud credentials and non-production accounts unless you have reviewed the generated Terraform plan. Remove or override the auto-approved destroy behavior, require explicit confirmation before apply or destroy, and avoid storing or committing Terraform state files or secrets.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger example is phrased as a broad natural-language request that overlaps with ordinary cloud-help queries. In an agent environment, this can cause unintended activation of the skill and lead the agent toward infrastructure generation or deployment workflows without the user explicitly opting into this specific high-impact skill.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The capability coverage text includes many broad keywords spanning coding, deployment, debugging, and general cloud management. This weakens routing constraints and increases the chance that unrelated user requests are matched to a skill capable of making real infrastructure changes.

Missing User Warnings

High
Confidence
94% confidence
Finding
The document promotes one-click deployment and destruction of cloud resources but does not provide strong warnings about cost, downtime, data loss, or permission scope. In a tool-using agent, describing these actions as routine can normalize immediate execution of impactful operations without adequate user awareness or approval.

Missing User Warnings

High
Confidence
98% confidence
Finding
The destroy path uses 'terraform destroy -auto-approve', which removes the interactive confirmation barrier for deleting infrastructure. In the context of an execution-capable agent skill, this materially increases the risk of accidental or unauthorized destruction of cloud resources and associated downtime or data loss.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
;;
  destroy)
    cd infra
    terraform destroy -auto-approve
    echo "已销毁$ENV环境资源"
    ;;
  *)
Confidence
97% confidence
Finding
auto-approve

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.