alibabacloud-yike-cli

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core upload/generation/media-inspection behavior is broadly aligned with the stated Yike purpose, and credential handling is relatively scoped. However, the skill enables autonomous paid submissions, includes transitive skill installation, and depends on an external CLI whose official provenance is only partially verified from the supplied evidence, raising medium overall risk.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Aug 26, 2026, 06:14 AM
Package URL
pkg:socket/skills-sh/aliyun%2Falibabacloud-aiops-skills%2Falibabacloud-yike-cli%2F@b43cc797a45e7da377e3e96fe3e823ac71deafaf41dc7592b5e011f36e742f14
Security Audit — socket — alibabacloud-yike-cli