alibabacloud-cms-dataset

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cli-installation-guide.md

The content is a legitimate-looking Aliyun CLI installation and configuration guide. No direct malware or intentional data theft is evident. The main security concern is the recommended curl-to-bash execution of an unverified remote script, compounded by mutable download URLs without checksums or signatures. Credential exposure through command-line arguments is an additional configuration risk. Installation should preferably use a trusted package manager or verified, pinned releases and the setup script should be reviewed before execution.

Confidence: 96%Severity: 55%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:04 PM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-cms-dataset%2F@3af0c9486f51fe54452aa1caddada5852940843522d06dff703c131c3635edf2