Skills/ClawHub/huawei-cloud-ecs-vulnerability-auditor

huawei-cloud-ecs-vulnerability-auditor@1.0.0

CAUTION

Publisher claims: "Audit Huawei Cloud ECS instances for security vulnerabilities across host OS packages, running services, application dependencies (Java, Python, Node.js, PHP, Go), and container environments (Docker, containerd, Podman). Collects asset inventories remotely via Cloud Operations Center (COC), matches components against Known Exploited Vulnerabilities (KEVs) via the public db.gcve.eu API, and outputs an actionable remediation report. 触发词: ECS漏洞扫描, ECS漏洞发现, 主机漏洞扫描, 容器漏洞发现, ECS资产收集, KEV漏洞检测, ecs vulnerability audit, ecs vuln scan, gcve vulnerability auditor" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huaweicloudskill · joined 2 days agoInstalls 49Last detonated 17 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Python subprocess execution detectedscripts/collect_assets.sh:102 · Python subprocess execution detected
AST05
MEDIUM
File type combined with upload actionSKILL.md:171 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Python subprocess execution detectedscripts/collect_assets.sh:90 · Python subprocess execution detected
AST05
HIGH
Python subprocess execution detectedscripts/collect_assets.sh:98 · Python subprocess execution detected
AST05
HIGH
Python subprocess execution detectedscripts/collect_assets.sh:94 · Python subprocess execution detected
AST05
HIGH
Authorization escalation languageskill-card.md:25 · Authorization escalation language
AST01
HIGH
Python subprocess execution detectedscripts/collect_assets.sh:86 · Python subprocess execution detected
AST05