alibabacloud-bailian-managed-agent

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cookbook/04-multi-agent-custom-proposals.md

The visible fragment is documentation for a legitimate multi-agent proposal workflow and contains no clear malware or deliberately hidden malicious payload. It does introduce meaningful security and privacy risks through unrestricted sandbox egress, external processing of internal materials, bearer-token handling in shell commands, and exposure of detailed event histories. Generated proposal content also has a demonstrated hallucination/integrity risk. Use least-privilege networking, protect API credentials, minimize sensitive uploads, validate generated outputs against authoritative files, and review external-search data flows.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Sep 19, 2026, 11:16 PM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-bailian-managed-agent%2F@68bdfef26433803c7080ff93454597dbea78ca25461336ccad11d0a48a3fd759