alibabacloud-loongcollector-ops

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cli-installation-guide.md

No explicit malicious code is present in the provided fragment because it is installer/usage instructions rather than the plugin/CLI implementation. However, it includes a high-impact supply-chain pattern: downloading and directly executing a remote script (`curl` -> `bash -c`) without showing integrity verification, and installing/updating an external plugin that expands local execution surface. These are the primary security risks indicated by this content; further inspection would require the actual setup.sh and plugin package contents/signatures.

Confidence: 64%Severity: 50%
Audit Metadata
Analyzed At
Aug 21, 2026, 09:25 AM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-loongcollector-ops%2F@751b0d0298f2d2efb4bfa8c6be34b4d68ff132fc1688af201c62bd221ddd0c0f
Security Audit — socket — alibabacloud-loongcollector-ops