huawei-cloud-cloudrobo-model-workflow

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The workflow is largely aligned with its stated CloudRobo orchestration purpose and keeps data flows within Huawei Cloud/CloudRobo, but it requires high-privilege cloud credentials, depends on a vendor CLI whose exact public installer provenance was not fully verified in the supplied evidence, and can dispatch actions to real robots with real-world consequences.

Confidence: 82%Severity: 54%
Audit Metadata
Analyzed At
Sep 10, 2026, 08:46 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-cloudrobo-model-workflow%2F@ad7d90017965c0ce24d20ff9c7030124f8c6f8c32c9e9b6228f95699b86855b3
Security Audit — socket — huawei-cloud-cloudrobo-model-workflow