huawei-cloud-eip-cost-optimizer
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The official SDK dependency path is mostly legitimate and the cloud credential scope is broadly plausible, but the skill is internally inconsistent: it markets itself as read-only while documenting bandwidth changes, tag management, release-oriented workflows, and privileged local jq remediation. Data flows to official Huawei APIs appear coherent, yet webhook/email alerting and shell-level system changes expand scope beyond a narrow reporting skill.
Confidence: 100%Severity: 60%
Audit Metadata