ClawHub
Back to skill

Security audit

Cloudforge Automatio

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent infrastructure automation skill, but it includes production cloud deployment examples that can change real resources without enough built-in user control.

Review this skill carefully before installing. It is not evidence of malware, but it is designed to help an agent write and run cloud infrastructure workflows. Use it only with scoped cloud credentials, non-production defaults, plan-only previews, protected CI/CD environments, manual approvals, and clear account/region boundaries before allowing any apply or Ansible execution.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger examples are broad natural-language prompts for initializing and managing multi-cloud infrastructure, which can easily overlap with ordinary user requests and cause the agent to invoke this skill unexpectedly. In the context of a skill that can read, write, edit files and execute Bash, accidental activation materially increases the chance of unintended infrastructure planning or deployment actions.

Missing User Warnings

High
Confidence
96% confidence
Finding
The skill quickly transitions from setup guidance to commands and workflow language that imply real multi-cloud initialization and deployment, but it does not clearly warn users that it can create, modify, or destroy billable cloud resources. Because the skill is positioned as enterprise automation and includes Bash tooling, the missing warning can mislead users into treating it as advisory-only when it is operationally impactful.

Missing User Warnings

High
Confidence
98% confidence
Finding
The CI/CD example defines an automatic apply path to production after a push to main, yet it lacks a clear user-facing safety warning about irreversible infrastructure changes, service disruption, or cost impact. In this skill's context, that is especially dangerous because the automation spans Terraform and Ansible, so a single trigger can both change infrastructure and reconfigure live hosts.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
name: tfplan
          path: infra/
      - name: Terraform执行
        run: cd infra && terraform apply -auto-approve tfplan
      - name: Ansible配置
        run: ansible-playbook -i inventory playbook.yml
      - name: 健康检查
Confidence
97% confidence
Finding
Using 'terraform apply -auto-approve' removes an important human verification checkpoint and enables autonomous execution of infrastructure changes. Within a skill designed for multi-cloud orchestration and CI/CD, this can turn a mistaken commit, prompt ambiguity, or mis-scoped configuration into immediate production-impacting changes without operator review.

Static analysis

No suspicious patterns detected.