腾讯云 COS 技能

The skill constructs shell commands using user-provided values for arguments (e.g., `--key`, `--file`, `--bucket`, `--name`, `--text`, `--body`). Without robust sanitization and quoting of these values when constructing the final shell command string, an attacker could inject arbitrary shell commands, leading to arbitrary code execution on the host system.

node {baseDir}/scripts/cos_node.mjs <action> [--option value ...], upload --file /path/to/file.jpg --key remote/path/file.jpg, create-knowledge-base --name <用户指定的名称>, ci-request --method POST --path "image/auditing" --body '<xml>...</xml>'

The `download` action allows users to specify an arbitrary `--output` path for downloaded files. If the agent's execution environment has access to sensitive directories, an attacker could download confidential cloud data to a location accessible by other processes or users.

download --key remote/path/file.jpg --output /path/to/save/file.jpg

The `ci-request` action provides a generic 'extension point' to call any CI API by specifying method, path, and body. This broad access could bypass specific security controls implemented for other actions and potentially be used for unauthorized operations or data manipulation if the underlying API is not strictly permissioned.

ci-request --method POST --path "image/auditing" --body '<xml>...</xml>', 用于调用尚未封装为独立 action 的 CI 能力

The skill provides explicit actions (`encrypt-env`, `decrypt-env`) to manage the persistence of cloud credentials to disk. While encryption is used, the `decrypt-env` action could expose credentials in plaintext if the host system is compromised after decryption, despite documented safeguards.

setup.sh --from-env --persist, node scripts/cos_node.mjs encrypt-env, node scripts/cos_node.mjs decrypt-env, 解密 .env.enc → .env 还原明文

The skill allows users to create cloud resources such as storage buckets, datasets, and knowledge bases. Without proper rate limiting or approval mechanisms, a malicious user could repeatedly create resources, leading to unexpected billing charges or resource exhaustion in the cloud account.

create-bucket --bucket mybucket-1250000000, create-dataset --name my-dataset, create-knowledge-base --name <用户指定的名称>