huawei-cloud-icp-process-guidance

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. 本地知识库问答部分是合理的,但为实现“搜索兜底”而要求安装无关第三方 Agent Reach,带来明显的供应链与信任链扩展风险;该依赖来源可验证为其项目官方文档,但仍是未固定版本的 GitHub 安装路径,且对一个备案 FAQ 技能来说不够相称。

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Jul 10, 2026, 06:28 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-icp-process-guidance%2F@17cc157db076bc569927fa58f3668c8d81e8010d4b706ed13364142b1b80e964
Security Audit — socket — huawei-cloud-icp-process-guidance