alibabacloud-agent-toolkit-install
Warn
Audited by Socket on Sep 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's overall purpose is coherent for an Alibaba Cloud toolkit installer, and most cloud/API flows are proportionate and first-party. Risk comes from raw remote installer scripts and especially the openplugin-based install path, which adds a third-party execution step whose provenance is less verifiable than the same-org GitHub repo; this is a medium supply-chain risk, not confirmed malware.
Confidence: 84%Severity: 68%
Audit Metadata