Security audit
Security checks for vulnerabilities and agentic risk
This read-only storage tool needs review because its advertised scan limits are ineffective and incomplete statistics can appear complete.
Review before installing. Use dedicated read-only credentials restricted to the intended buckets, and confirm which account both execution paths use. Do not rely on --max-objects to bound collection or assume reports are complete until collection limits and pagination are corrected. Verify CLI downloads before installation. All 48 bundled offline tests passed, but additional mocked checks reproduced the limit defects; live cloud behavior and external dependency contents remain unverified.
The implementation does not propagate the requested object cap into collection, and CLI listings use a fixed limit without pagination or reliable truncation reporting. These defects undermine the resource-control and report-integrity guarantees of a statistics tool; appending a slash also silently changes prefix scope and can undercount matching objects.
The commands are read-only and use the declared OBS listing mechanism, so there is no evidence of unauthorized mutation or unrelated resource access. However, the supplied executable behavior is limited to two hard-coded listings, materially short of the described statistics tool. This assessment is limited to the supplied chunk; it does not establish whether the missing features exist elsewhere.
The installation sequence trusts a mutable latest archive without an independently trusted checksum or signature, then installs its executable on the system PATH. Compromise of the distribution source could therefore introduce code that later runs with the user's cloud credentials; this is a supply-chain weakness rather than shell parameter injection.
curl -O https://obs-community-tool.obs.cn-north-1.myhuaweicloud.com/hcloudcli/latest/hcloudcli-linux-amd64.tar.gz
tar -xzf hcloudcli-linux-amd64.tar.gz
chmod +x hcloud
sudo mv hcloud /usr/local/bin/
Without declared permissions the skill's intent is opaque and cannot be validated.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
curl -O https://obs-community-tool.obs.cn-north-1.myhuaweicloud.com/hcloudcli/latest/hcloudcli-linux-amd64.tar.gz tar -xzf hcloudcli-linux-amd64.tar.gz chmod +x hcloud sudo mv hcloud /usr/local/bin/
### macOS
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
curl -O https://obs-community-tool.obs.cn-north-1.myhuaweicloud.com/obsutil/current/obsutil_linux_amd64.tar.gz tar -xzf obsutil_linux_amd64.tar.gz chmod +x obsutil_linux_amd64_/obsutil sudo mv obsutil_linux_amd64_/obsutil /usr/local/bin/
---
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
credentials. The
hcloud OBS lscommand reads AK/SK/endpoint from the obsutil config file (~/.obsutilconfig).
Never ask the user to paste AK/SK directly into the conversation. Instruct them to run the following in their own terminal:
The pass criteria explicitly require error paths to emit a Chinese hint on stderr, reinforced by the verification expectations at lines 69–70 and 79. This imposes a specific natural language on user-facing diagnostics without offering a language choice or explaining a locale-specific requirement.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=300, universal_newlines=True,
)
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=300, universal_newlines=True,
)
The CLI collectors request a fixed limited listing without pagination, while their lister adapters always return false for truncation. Larger scopes can consequently produce understated counts and capacity that appear complete, compromising the integrity of operational inventory and capacity decisions.
collect_stats checks the object count only after the lister has fetched and retained its results, and resolve_listers does not pass the requested cap to the SDK. A small user-selected cap therefore does not bound collection, allowing excess API requests, memory consumption, and processing time within the lister's independent limits.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
if index:
cmd.extend(["-i", index])
cmd.append(package)
return subprocess.call(cmd) == 0
def ensure(upgrade=False):