alibabacloud-yike-cli
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core upload/generation/media-inspection behavior is broadly aligned with the stated Yike purpose, and credential handling is relatively scoped. However, the skill enables autonomous paid submissions, includes transitive skill installation, and depends on an external CLI whose official provenance is only partially verified from the supplied evidence, raising medium overall risk.
Confidence: 84%Severity: 62%
Audit Metadata