Security audit
Security checks for vulnerabilities and agentic risk
This read-only cloud inventory skill needs review because exact-name searches silently ignore tag restrictions, and its installer source could not be verified.
Avoid combining exact-name and tag filters until the filtering bug is corrected. Use credentials limited to DCS inventory access, configure secrets outside chat, and protect exports containing infrastructure details. Install KooCLI through Huawei's verified instructions instead of the unverified bundled URL, and select an export path that may safely be overwritten. The bundled code was inspected and the filtering flaw reproduced with mocked data; live cloud behavior and external installer contents were not tested.
Local exact-name matching is explicitly documented and is not inherently unsafe, but the implementation also discards the requested tag filter without reapplying it locally. This can include instances outside the requested inventory subset in displayed or exported results, although IAM authorization remains enforced.
The supplied command targets a local skill path for scanning; it does not query DCS or process instance data. Although its file location suggests a verification reference, the command's actual function is not among the declared capabilities. This assessment is limited to the supplied chunk and does not establish what other skill files implement.
Without declared permissions the skill's intent is opaque and cannot be validated.
The verification contract requires exact equality with Chinese column headers and a Chinese file-written message. This enforces a specific output language without offering a locale choice or documenting a justification for the restriction.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
When --name-equal is enabled, main passes tags=None and subsequently filters only by name. Instances that do not satisfy the user's tag restriction can consequently appear in output or exported inventory, creating a data-scoping and reporting-integrity issue without bypassing cloud IAM.
The criteria prescribe Chinese text for the empty-region message and the permission-denied hint. These requirements fix the language of user-facing output without documenting user opt-in or a justified language restriction.