huawei-cloud-business-support-query

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly coherent with Huawei Cloud billing/resource queries and uses official-looking Huawei SDK/API paths, but it requires automatic execution of opaque local scripts, forwards cloud credentials to those scripts, and discourages inspecting their contents. With no visible third-party proxy or overt exfiltration, this looks more like a medium-risk, low-transparency enterprise query skill than confirmed malware.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Jun 26, 2026, 01:45 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-business-support-query%2F@332e4a533b258a292ea83b89c3153f6371f047be1b0ef0aa54c5d5652530f31f
Security Audit — socket — huawei-cloud-business-support-query