cloudq

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely coherent for a Tencent Cloud Smart Advisor helper and uses mostly official Tencent endpoints, with no obvious malware or remote-installer behavior. Risk is elevated because it handles high-value cloud credentials, performs sensitive IAM operations, has broader Bash/Write capability, and includes an unexplained clawhub.ai network permission that conflicts with the stated Tencent-only network scope.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
May 18, 2026, 01:04 AM
Package URL
pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Fcloudq%2F@e00bfa4de9aaad5cfffd9f735e2d4720ca6ba39d
Security Audit — socket — cloudq