cloudq
Warn
Audited by Socket on May 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is largely coherent for a Tencent Cloud Smart Advisor helper and uses mostly official Tencent endpoints, with no obvious malware or remote-installer behavior. Risk is elevated because it handles high-value cloud credentials, performs sensitive IAM operations, has broader Bash/Write capability, and includes an unexplained clawhub.ai network permission that conflicts with the stated Tencent-only network scope.
Confidence: 84%Severity: 61%
Audit Metadata