huawei-cloud-cce-cluster-management

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its stated Huawei CCE management purpose, and most data flows appear to target official Huawei services. Main risks are supply-chain trust from curl-to-bash installation, credential forwarding into external CLI/plugin tooling, and transitive installation of another skill for kubectl-cce. This looks more like a powerful infrastructure-admin skill with meaningful operational and credential-handling risk than confirmed malware.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Sep 1, 2026, 10:35 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-cce-cluster-management%2F@ccbc53b5107da4857ccbf87b311810f1c2ec143ea7cceb0bda0ddf771f12d9fc