alibabacloud-tair-devtoolset
Warn
Audited by Socket on Sep 24, 2026
2 alerts found:
Anomalyx2AnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capability set is coherent for a Tair admin/devtool skill and uses mostly official Alibaba Cloud tooling/endpoints, so this is not confirmed malware. Risk is elevated because it performs real cloud control-plane actions, includes a transitive skill installation step, and ships insecure TLS examples that weaken connection security; these issues are disproportionate enough to avoid a benign classification.
Confidence: 91%Severity: 61%
Anomalyreferences/ram-policies.md
LOWAnomalyLOW
references/ram-policies.md
No malware is evident in this policy document. If applied, its wildcard scope grants broad Tair management privileges, including networking and restore operations; restrict resource scope and actions to the actual operational need.
Confidence: 99%Severity: 56%
Audit Metadata