ClawHub
Back to skill

Security audit

腾讯云对象存储管理

Security checks for vulnerabilities and agentic risk

Overview

This Tencent Cloud storage skill does what it says, but it asks for broad storage access and can delete cloud data without built-in safeguards.

Install only if you need an agent to manage Tencent COS. Use a dedicated sub-user, restrict permissions to specific buckets, prefixes, and required actions instead of name/cos:* on *, keep the .env file private, prefer a virtual environment for dependencies, and manually review any delete, force-delete, lifecycle expiration, ACL/public-access, or download-destination operation before running it.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The delete_bucket method supports force=True, which clears all objects and multipart uploads before deleting the bucket, but it performs no confirmation, dry-run, or additional safeguard. In an agent or automation context, a mistaken bucket name or unsafe caller input could cause irreversible large-scale data loss.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
delete_object permanently removes an object with no warning, confirmation, soft-delete, or version-awareness. In automated workflows, this increases the risk that prompt injection, user error, or bad parameter handling leads to unintended deletion of important data.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
put_lifecycle allows callers to configure expiration rules that can automatically delete objects, yet it validates neither the safety of rules nor provides any warning when expiration is enabled. Misconfigured prefixes or aggressive expiration periods can silently and continuously remove stored data at scale.

Credential Access

High
Category
Privilege Escalation
Content
- ✅ 使用子用户密钥，不用主账号
- ✅ 设置最小权限
- ✅ .env 文件妥善保管
- ✅ 定期轮换密钥 (90 天)
- ❌ 不要提交密钥到 Git
Confidence
86% confidence
Finding
The skill instructs users to store long-lived cloud API credentials in a .env file and demonstrates handling raw secrets directly. In a skill that manages Tencent COS with broad `name/cos:*` permissions and resource `*`, compromise of that file would allow bucket and object operations across accessible storage, potentially leading to data theft, deletion, tampering, or cost-impacting abuse.

Static analysis

No suspicious patterns detected.