huawei-cloud-ascend-remote-connect

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities generally match its stated SSH remote-admin purpose, and dependency installs come from normal official PyPI channels. The main concerns are the very broad remote-administration scope, real-world impact of agent-driven SSH actions, and insecure password handling via command-line arguments; with no implementation code, the claimed confirmation and blocking controls cannot be verified.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 17, 2026, 09:11 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-ascend-remote-connect%2F@74b905767485db639d047188d251d5559a44a8356973e2cafbe54ebd5997ddf2
Security Audit — socket — huawei-cloud-ascend-remote-connect