alibabacloud-loongcollector-ops

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cli-installation-guide.md

No explicit malicious code is present in the provided fragment because it is installer/usage instructions rather than the plugin/CLI implementation. However, it includes a high-impact supply-chain pattern: downloading and directly executing a remote script (`curl` -> `bash -c`) without showing integrity verification, and installing/updating an external plugin that expands local execution surface. These are the primary security risks indicated by this content; further inspection would require the actual setup.sh and plugin package contents/signatures.

Confidence: 64%Severity: 50%
Audit Metadata
Analyzed At
Sep 6, 2026, 01:06 PM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-loongcollector-ops%2F@e8cce9f23f92f702bf9935c2f99e4e3877cd68a615decc49d20da650de585d21