huawei-cloud-ecs-vulnerability-auditor
Warn
Audited by Socket on Nov 4, 2026
1 alert found:
AnomalyAnomalyreferences/iam-policies.md
LOWAnomalyLOW
references/iam-policies.md
This documentation instructs an operator to create a persistent COC-trusted agency and grant roles across all projects, including COC document execution and deletion permissions. This is a significant privilege-management risk if applied unnecessarily or to an untrusted COC service, but the fragment contains no evidence of malware or covert activity. Severity is moderate to high due to the broad, persistent access being granted.
Confidence: 98%Severity: 62%
Audit Metadata