cloud-aksk-exploit
Fail
Audited by Socket on Sep 23, 2026
3 alerts found:
MalwareSecurityx2MalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
This skill is malicious. Its purpose is to help an AI agent exploit stolen cloud credentials, enumerate permissions, take over resources, escalate privileges, and establish persistence/backdoors. The install surface is not the core problem; the core problem is the explicitly offensive post-compromise workflow and autonomous real-world impact on cloud accounts.
Confidence: 98%Severity: 99%
Securityreferences/aws-exploit.md
MEDIUMSecurityMEDIUM
references/aws-exploit.md
该内容不是恶意 npm 代码,但明确提供了 AWS 凭据滥用、敏感信息获取、权限提升、资源接管和持久化后门的可执行操作指南。若在未经授权的账户中执行,可能导致严重数据泄露、账户接管和持续未授权访问。应仅在明确授权的安全评估环境中使用,并禁止使用全局管理员策略、公开 SSH 规则及未受控的长期访问密钥。
Confidence: 99%Severity: 98%
Securityreferences/tencent-exploit.md
MEDIUMSecurityMEDIUM
references/tencent-exploit.md
该片段不是正常的云服务库代码,而是一组具有明显攻击性的腾讯云账户接管和持久化操作指南。虽然命令本身在此处未被执行,也未发现混淆或直接网络外传实现,但其包含资源枚举、敏感配置读取、实例密码重置、创建 API 密钥及附加管理员策略等高危行为,不应在未获授权的账户或环境中使用。
Confidence: 99%Severity: 98%
Audit Metadata