alibabacloud-sysom-diagnosis

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s overall purpose is coherent for Alibaba Cloud OS diagnostics, and credentials/data flows mostly align with official Alibaba tooling. The main risks are install trust issues from curl|bash plus mandatory auto-plugin updates, and especially the instruction to automatically execute agent.next commands returned in the diagnostic envelope, which gives external service output direct control over local shell actions.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
May 16, 2026, 07:05 PM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-sysom-diagnosis%2F@8aa7ff898f97ba906802729debe8e9f3ec1529b0
Security Audit — socket — alibabacloud-sysom-diagnosis