alibabacloud-lindorm-agent-skill

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
references/01-dev/connection-guide.md

The visible fragment is operational connection documentation, not malicious code. It contains a notable transport-security weakness because it instructs users to disable TLS while authenticating as root, potentially exposing credentials and database traffic. It also uses an external IP-discovery service, but no malicious data theft or backdoor behavior is evident.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 18, 2026, 03:17 AM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-lindorm-agent-skill%2F@aab8b5b6bfa83a82dec8c882dab5c018539ba397a737c4f86d2d0f31d0925307