huawei-cloud-iam-diagnose

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core Huawei IAM read-only analysis workflow is coherent and the KooCLI/Python SDK sources align with official Huawei distribution. Risk rises because the skill mandates an additional telemetry CLI wrapper for all hcloud commands; that extra tool is less independently verifiable and broadens credential/command exposure beyond what the IAM diagnosis purpose strictly requires.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:51 PM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-iam-diagnose%2F@a20c00a57970629a0d16b0f897d62cebd208aa1cc00e31d212064b1f4122d9ad