ClawHub
Back to skill

Security audit

TencentCloud COS Storage

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent Tencent Cloud COS management helper, but it asks for broad cloud-storage permissions and includes deletion paths without strong safeguards or clear scoping.

Install only if you intentionally want an agent to manage Tencent Cloud COS resources. Use a dedicated sub-user key, avoid the wildcard policy where possible, scope permissions to specific buckets and needed actions, keep `.env` out of source control, and review any `delete_object`, `delete_bucket(force=True)`, or lifecycle expiration rule before running it because cloud data may be permanently removed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill advertises bucket deletion capability without any warning about irreversibility, versioning considerations, or the risk of deleting production data. In an infrastructure-management skill, omission of destructive-operation safeguards increases the chance of accidental data loss by users or downstream agents following the documentation mechanically.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

No suspicious patterns detected.