安全决策报告
huawei-cloud-devbridge-tunnel
The skill is a legitimate DevBridge tunnel management tool but relies on unsafe curl|bash remote script execution for CLI installation, uses eval() in its command adaptation layer, and lacks declared allowed tools — raising security concerns without confirmed malicious intent.
最直接的威胁证据
高危 代码执行
Unsafe curl|bash remote script execution The skill downloads and executes a remote installation script from res-hd.hc-cdn.cn without version pinning, checksum verification, or HTTPS certificate pinning. This is a well-known attack vector where the remote server could serve malicious code at any time.
SKILL.md:87 为什么得出这个结论
3/4 个维度触发 阻止
声明与实际能力
发现 5 项声明之外的能力或越权行为。
阻止
隐藏执行与外联
提取到 3 个高危 IOC 或外联信号。
阻止
攻击链与高危发现
报告包含 0 步攻击链，另有 2 项高危或严重发现。
复核
依赖与供应链卫生
发现 1 项需要关注的依赖或供应链线索。
风险分是怎么被拉高的
curl|bash remote script execution +15
SKILL.md:87, 140, 157 and cli-installation-guide.md:37 download and execute code from https://res-hd.hc-cdn.cn — not version-pinned, no checksum verification
eval() in command execution layer +12
scripts/devbridge_cmd.sh lines 68, 76, 88, 98, 110 use eval with constructed command strings; potential injection if tunnel IDs are not sanitized
No declared allowed tools +8
SKILL.md does not specify allowed-tools; capability inference shows filesystem:WRITE, network:READ, shell:WRITE without explicit declaration
Dangerous documentation examples +5
references/cli-installation-guide.md:137 references 'rm -rf ~' for uninstall; cli-installation-guide.md:161 uses curl with proxy for remote script execution
nohup background process creation +3
SKILL.md:160 uses nohup to background host processes; creates persistence risk if processes are not cleaned up
最关键的证据
高危 代码执行
Unsafe curl|bash remote script execution
The skill downloads and executes a remote installation script from res-hd.hc-cdn.cn without version pinning, checksum verification, or HTTPS certificate pinning. This is a well-known attack vector where the remote server could serve malicious code at any time.
SKILL.md:87 Replace with direct binary download and checksum verification. Pin to a specific version and verify GPG signature or SHA256 hash before execution.
高危 代码执行
eval() usage in command execution layer
The adaptation layer scripts/devbridge_cmd.sh uses eval() to execute dynamically constructed command strings. While the inputs are internally generated, the pattern is dangerous and could become a vector if tunnel IDs or other parameters are ever influenced by external input.
scripts/devbridge_cmd.sh:68 Replace eval() with bash arrays or safer command construction. Use 'bash -c' with an array of arguments instead of string interpolation.
中危 文档欺骗
No allowed-tools declaration in SKILL.md
SKILL.md does not declare which pi allowed tools the skill uses. Based on the implementation, the skill requires filesystem:WRITE, network:READ, and shell:WRITE — none of which are declared.
SKILL.md:1 Add an allowed-tools section declaring: Read (filesystem:READ), Write (filesystem:WRITE), Bash (shell:WRITE), WebFetch (network:READ)
中危 供应链
Unversioned remote download source
The installation URL https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh is not version-pinned. The script could serve different content over time without notice, creating a supply chain risk.
SKILL.md:87 Pin to a specific versioned URL or commit hash. Add integrity verification step.
低危 敏感访问
Dangerous rm command in documentation
The CLI installation guide references 'rm -rf ~' (with a space) as an uninstall command, which could cause data loss if the trailing space is stripped or misinterpreted. The command also removes ~/.huawei/devbridge which contains authentication credentials.
references/cli-installation-guide.md:137 Use explicit paths without shell globs: rm -rf "$HOME/.huawei/devbridge". Warn that this also removes credentials.
低危 持久化
Background process persistence without cleanup guarantee
The skill uses nohup to run devbridge host/connect in the background. These processes may continue running after the skill completes if not explicitly stopped, creating a persistence risk where local services remain exposed.
SKILL.md:160 Document cleanup steps prominently. Consider tracking PIDs and providing explicit cleanup commands in all execution paths including error paths.
声明能力 vs 实际能力
文件系统 阻止
声明 NONE
→ 推断 WRITE
SKILL.md:87 — curl|bash writes to ~/.huawei/bin/ and ~/.huawei/devbridge/; not declared 网络访问 阻止
声明 NONE
→ 推断 READ
SKILL.md:87,139 — downloads CLI from res-hd.hc-cdn.cn; Huawei Cloud relay communication; not declared 命令执行 阻止
声明 NONE
→ 推断 WRITE
scripts/devbridge_cmd.sh — eval-based command execution with retry logic; no declaration 环境变量 阻止
声明 NONE
→ 推断 READ
SKILL.md:130 — reads PATH for ~/.huawei/bin; devbridge auth reads AK/SK env vars 技能调用 阻止
声明 NONE
→ 推断 READ
SKILL.md:44 — skill_invoke used to chain with other DevBridge commands 可疑产物与外联
严重 危险命令
curl -fsSL https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh | bash SKILL.md:87
严重 危险命令
rm -rf ~ references/cli-installation-guide.md:137
严重 危险命令
curl --proxy <proxy-url> -fsSL <install-url> | bash references/cli-installation-guide.md:161
中危 外部 URL
https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh SKILL.md:87
中危 外部 URL
https://noh56s7x-8080.cn-north-4-bridge.myhuaweicloud.com SKILL.md:306
中危 外部 URL
https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.ps1 references/cli-installation-guide.md:36
中危 外部 URL
https://devbridge. references/rest-api-reference.md:8
中危 外部 URL
https://res-hd.hc-cdn.cn references/troubleshooting.md:58
中危 外部 URL
https://clawhub.ai/user/huaweiclouddev skill-card.md:9
中危 外部 URL
https://clawhub.ai/huaweiclouddev/skills/huawei-cloud-devbridge-tunnel skill-card.md:47
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| devbridge-cli | 0.1.12+ (unpinned) | https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh | 否 | Remote script execution with no version pinning or integrity verification |
| bash | any | system | 否 | Required shell; eval() usage is a concern |
文件构成
11 个文件 · 2755 行
Markdown 9 个文件 · 2391 行Shell 1 个文件 · 359 行JSON 1 个文件 · 5 行
需关注文件 · 6
SKILL.md Unsafe curl|bash remote script execution · No allowed-tools declaration in SKILL.md · Unversioned remote download source · Background process persistence without cleanup guarantee · curl -fsSL https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh | bash · https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.sh · https://noh56s7x-8080.cn-north-4-bridge.myhuaweicloud.com
scripts/devbridge_cmd.sh eval() usage in command execution layer
references/troubleshooting.md https://res-hd.hc-cdn.cn
references/rest-api-reference.md https://devbridge.
references/cli-installation-guide.md Dangerous rm command in documentation · rm -rf ~ · curl --proxy <proxy-url> -fsSL <install-url> | bash · https://res-hd.hc-cdn.cn/sharedata/hdspace/devbridge/install.ps1
skill-card.md https://clawhub.ai/user/huaweiclouddev · https://clawhub.ai/huaweiclouddev/skills/huawei-cloud-devbridge-tunnel
其他文件 · acceptance-criteria.md · cli-command-reference.md · iam-policies.md · verification-method.md · _meta.json
安全亮点
The skill implements a legitimate DevBridge tunnel management service with no evidence of credential exfiltration
The adaptation layer (devbridge_cmd.sh) is a well-structured version-agnostic wrapper that handles CLI flag variations
SKILL.md provides comprehensive documentation of all tunnel operations and parameters
skill-card.md documents known risks including credential handling, background processes, and destructive operations
The skill does not use base64 encoding, obfuscation, or hidden functionality
No direct credential theft or data exfiltration patterns detected in the code