huawei-cloud-cce-chaos-experiment

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/deploy_experiment.sh

This script does not itself execute the outage, but untrusted experiment paths can inject Python into the parsing command, and untrusted JSON values can inject shell commands into the generated rollback script. Treat the experiment directory and its contents as trusted only, or use safe argument passing and shell escaping/validation before execution.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Sep 30, 2026, 07:59 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-cce-chaos-experiment%2F@8f3ebc712613143cdfe2bc4d61631e2ce78ecf38afb9c31ab01240ef18dbc1ba