alibabacloud-oss-media-process

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/process.py

The fragment appears to be a legitimate Alibaba Cloud OSS media-processing CLI, not malware. It contains no clear data theft, persistence, reverse shell, cryptomining, or obfuscation indicators. If exposed to untrusted input, arbitrary URL fetching creates an SSRF-like risk and can transfer fetched content into the configured bucket; arbitrary local paths also require trusted invocation. The displayed epilog may contain a syntax error, but that is not evidence of malicious behavior.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:13 AM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-oss-media-process%2F@1798eb4d7a3949708f82e2db1a8d2bceda052cf674d28f83c9bc4b8ef94b5101