huawei-cloud-ces-ecs-monitoring
Warn
Audited by Snyk on Jun 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's installation instructions explicitly run remote install scripts (e.g., curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh) and download/execute tarballs from https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/, which fetches and executes remote code as part of required CLI setup for the skill.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata