alibabacloud-tair-devtoolset

Warn

Audited by Socket on Sep 24, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capability set is coherent for a Tair admin/devtool skill and uses mostly official Alibaba Cloud tooling/endpoints, so this is not confirmed malware. Risk is elevated because it performs real cloud control-plane actions, includes a transitive skill installation step, and ships insecure TLS examples that weaken connection security; these issues are disproportionate enough to avoid a benign classification.

Confidence: 91%Severity: 61%
AnomalyLOW
references/ram-policies.md

No malware is evident in this policy document. If applied, its wildcard scope grants broad Tair management privileges, including networking and restore operations; restrict resource scope and actions to the actual operational need.

Confidence: 99%Severity: 56%
Audit Metadata
Analyzed At
Sep 24, 2026, 11:58 PM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-tair-devtoolset%2F@15b5c896ee962c1edec3ba1c48466edcc7f48b1ca05fcba81748f9c271fdd81b