📦
Audit History
auth-tool-cloudbase - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 9, 2026, 03:21 PM
Most static findings are false positives caused by Markdown backticks, relative documentation links, and documented OAuth or console URLs. The confirmed risks are the skill's legitimate ability to guide email sender setup, API key lifecycle operations, and privileged auth provider changes that require explicit user approval.
2
Files scanned
545
Lines analyzed
14
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Privileged Auth Configuration Changes
The skill guides provider creation, update, deletion, and API key lifecycle actions. These operations can change production authentication behavior or revoke credentials if used without explicit approval.
The cited lines explicitly name add, update, delete, create, list, and revoke actions for auth providers and API keys. This is intentional administrative functionality, so the risk is operational rather than hidden malware.
Medium
Sensitive Credential Handling Guidance
The skill asks users or agents to handle SMTP passwords, WeChat AppSecret values, and Google Client Secret values in provider configuration examples. Mishandling those values could expose authentication provider secrets.
The cited examples directly include password and secret fields, although they use placeholders. The risk depends on whether real secrets are provided in an agent conversation or logs.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys · 2 occurrences
"keyType": "api_key",
The skill documents listing or creating CloudBase API keys. That is a real credential lifecycle capability and should require explicit user approval and careful handling.
High
Generic API/secret keys
`createApiKey` defaults to `publish_key` when `keyType` is omitted, but it can also create `api_key`
The skill documents listing or creating CloudBase API keys. That is a real credential lifecycle capability and should require explicit user approval and careful handling.
Medium
Email sending capability
- `ModifyProvider(Id="email")`: controls the email sender channel and SMTP configuration
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
"EmailConfig": { "On": "TRUE", "SmtpConfig": {} }
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
**Configure email provider (custom SMTP)**:
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
"SmtpConfig": {
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
"ServerHost": "smtp.qq.com",
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Risk Factors
⚙️ External commands (50)
SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:15 SKILL.md:23 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:50 SKILL.md:56 SKILL.md:62 SKILL.md:68 SKILL.md:69 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:84 SKILL.md:88-92 SKILL.md:92-94 SKILL.md:94-96 SKILL.md:96-107 SKILL.md:107-109 SKILL.md:109 SKILL.md:112-114 SKILL.md:114-118 SKILL.md:118-122 SKILL.md:122-123 SKILL.md:123-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-128 SKILL.md:128-132 SKILL.md:132 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:136-137 SKILL.md:137 SKILL.md:138 SKILL.md:139-140 SKILL.md:140-142 SKILL.md:142-146 SKILL.md:146-148 SKILL.md:148-154 SKILL.md:154-156 SKILL.md:156-160 SKILL.md:160-167 SKILL.md:167-169
🌐 Network access (19)
📁 Filesystem access (4)
🔑 Env variables (3)
Audited by: codex
Jul 9, 2026, 03:21 PM
Most static findings are false positives caused by Markdown backticks, relative documentation links, and documented OAuth or console URLs. The confirmed risks are the skill's legitimate ability to guide email sender setup, API key lifecycle operations, and privileged auth provider changes that require explicit user approval.
2
Files scanned
545
Lines analyzed
14
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Privileged Auth Configuration Changes
The skill guides provider creation, update, deletion, and API key lifecycle actions. These operations can change production authentication behavior or revoke credentials if used without explicit approval.
The cited lines explicitly name add, update, delete, create, list, and revoke actions for auth providers and API keys. This is intentional administrative functionality, so the risk is operational rather than hidden malware.
Medium
Sensitive Credential Handling Guidance
The skill asks users or agents to handle SMTP passwords, WeChat AppSecret values, and Google Client Secret values in provider configuration examples. Mishandling those values could expose authentication provider secrets.
The cited examples directly include password and secret fields, although they use placeholders. The risk depends on whether real secrets are provided in an agent conversation or logs.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys · 2 occurrences
"keyType": "api_key",
The skill documents listing or creating CloudBase API keys. That is a real credential lifecycle capability and should require explicit user approval and careful handling.
High
Generic API/secret keys
`createApiKey` defaults to `publish_key` when `keyType` is omitted, but it can also create `api_key`
The skill documents listing or creating CloudBase API keys. That is a real credential lifecycle capability and should require explicit user approval and careful handling.
Medium
Email sending capability
- `ModifyProvider(Id="email")`: controls the email sender channel and SMTP configuration
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
"EmailConfig": { "On": "TRUE", "SmtpConfig": {} }
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
**Configure email provider (custom SMTP)**:
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
"SmtpConfig": {
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Medium
Email sending capability
"ServerHost": "smtp.qq.com",
The skill explicitly guides CloudBase email provider and SMTP sender configuration. That is legitimate for auth setup but security-relevant because it can alter outbound authentication email behavior.
Risk Factors
⚙️ External commands (50)
SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:15 SKILL.md:23 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:50 SKILL.md:56 SKILL.md:62 SKILL.md:68 SKILL.md:69 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:84 SKILL.md:88-92 SKILL.md:92-94 SKILL.md:94-96 SKILL.md:96-107 SKILL.md:107-109 SKILL.md:109 SKILL.md:112-114 SKILL.md:114-118 SKILL.md:118-122 SKILL.md:122-123 SKILL.md:123-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-128 SKILL.md:128-132 SKILL.md:132 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:136-137 SKILL.md:137 SKILL.md:138 SKILL.md:139-140 SKILL.md:140-142 SKILL.md:142-146 SKILL.md:146-148 SKILL.md:148-154 SKILL.md:154-156 SKILL.md:156-160 SKILL.md:160-167 SKILL.md:167-169
🌐 Network access (19)
📁 Filesystem access (4)
🔑 Env variables (3)
Audited by: codex