Security audit
Security checks for vulnerabilities and agentic risk
ClawScan marks this skill suspicious because the scanner found a risky remote installer and an environment-controlled command override that could run another program with cloud credentials; this is a review warning, not a finding of malicious intent.
Review the installation instructions and avoid running the downloaded installer until you can verify it through a trusted source. Install only if you trust the package and can protect the environment variables that select the CLI executable and add its arguments. Skillspector inspected all listed components but marked analysis partial because several local path-like references could not be resolved, so the evidence is incomplete.
Without declared permissions the skill's intent is opaque and cannot be validated.
The acceptance criterion explicitly requires Chinese headers in exported Markdown files. Selecting Markdown export is not a language opt-in, and the file provides no justification for imposing this locale.
The guide instructs users to execute a mutable remote installer without verifying a signature or independently trusted digest. HTTPS protects transport but not against compromise of the distribution endpoint; a substituted installer could execute with the user's privileges and access local cloud credentials, despite the inventory operation itself being read-only.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
Production execution accepts an arbitrary executable through RDS_LIST_HCLOUD_BIN and prepends unvalidated RDS_LIST_HCLOUD_ARGS before the fixed RDS arguments, outside the write-intent guard. If an attacker can influence these environment variables, they can substitute a program or interpreter invocation that executes arbitrary code with inherited cloud credentials; this is conditional on environment control, not shell injection through normal CLI filters.
cmd.extend(extra)
cmd.extend(argv)
try:
proc = subprocess.run(
cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
timeout=120, universal_newlines=True,
)
The export layout explicitly fixes the title and table headers in Chinese without offering a language option or documenting a locale-specific justification. Opting into Markdown export selects a file format, not a language.
The expected result explicitly requires a Chinese header row in the generated Markdown, enforcing a specific output language through the test specification. The file provides no language choice or documented justification for that requirement; selecting a cloud region does not itself establish a user language preference.