alibabacloud-agent-toolkit-install

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's overall purpose is coherent for an Alibaba Cloud toolkit installer, and most cloud/API flows are proportionate and first-party. Risk comes from raw remote installer scripts and especially the openplugin-based install path, which adds a third-party execution step whose provenance is less verifiable than the same-org GitHub repo; this is a medium supply-chain risk, not confirmed malware.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Sep 11, 2026, 02:19 AM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-agent-toolkit-install%2F@dfdb6416ecd5a56f83a51385fc303a64d53ad30d0302d3433d940859f3bf1486