huawei-cloud-flexus-l-server-flexusagent-deployment

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/lib.py

No clear evidence of malware or an unauthorized backdoor is present. The code implements high-impact cloud and application administration, including paid auto-renewing provisioning and remote script execution. The clearest security concerns are logging signed authorization headers, accepting an unrestricted base_url for credential-bearing requests, and interpolating passwords into remote script content. The supplied fragment is syntactically incomplete at SCRIPT_TEMPLATES, limiting assessment of the omitted scripts.

Confidence: 97%Severity: 63%
Audit Metadata
Analyzed At
Oct 14, 2026, 04:15 PM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-flexus-l-server-flexusagent-deployment%2F@57741ab2b9b8d25efa9b6855544fe9406f9a447211a00b4efed5a0489f026c8d