← back to performing-cloud-forensics-investigation

SkillSpector · performing-cloud-forensics-investigation

independent scanner by NVIDIA · skill by mukul975 · how it works ↗

WARNINGmax severity: HIGHrisk score: 62

Data is uploaded to cloud storage (S3 / GCS / Azure Blob). This may be a legitimate backup or exfiltration to an external bucket. Manual review is recommended.; Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.; Potential security issue detected. Manual review is recommended.; +2 more

scanned 2026-07-07

Findings (5)

MEDIUMData Exfiltrationconfidence: 0.6

Data is uploaded to cloud storage (S3 / GCS / Azure Blob). This may be a legitimate backup or exfiltration to an external bucket. Manual review is recommended.

SKILL.md

MEDIUMPrivilege Escalationconfidence: 0.7

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

SKILL.md

HIGHPrivilege Escalationconfidence: 0.7

Potential security issue detected. Manual review is recommended.

SKILL.md

HIGHServer-Side Request Forgeryconfidence: 0.9

Code accesses a cloud instance metadata endpoint (e.g. 169.254.169.254). A single request can return temporary IAM credentials, making this a high-value SSRF ta

SKILL.md

HIGHYARA Matchconfidence: 0.375

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

SKILL.md

What the verdicts mean

SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.

PASS

Overall severity LOW (risk score in the safe range)

CAUTION

Overall severity MEDIUM

WARNINGthis skill

Overall severity HIGH

FAIL

Overall severity CRITICAL

INCONCLUSIVE

Scan could not complete