alibabacloud-sysom-diagnosis
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s overall purpose is coherent for Alibaba Cloud OS diagnostics, and credentials/data flows mostly align with official Alibaba tooling. The main risks are install trust issues from curl|bash plus mandatory auto-plugin updates, and especially the instruction to automatically execute agent.next commands returned in the diagnostic envelope, which gives external service output direct control over local shell actions.
Confidence: 84%Severity: 68%
Audit Metadata