alibabacloud-flink-python-job-submission

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cli-installation-guide.md

The content is legitimate-looking Aliyun CLI documentation with no direct evidence of malware or malicious intent. However, piping a remotely downloaded script directly to bash creates a significant supply-chain exposure because the script is neither inspected nor integrity-pinned. Prefer downloading, reviewing, and verifying the script or using a package manager with signed artifacts before execution.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 06:16 AM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-flink-python-job-submission%2F@89e0d9842deba61ce734d778abac3b70db4095d05fcd8e1ceea3dd80332d83f3