huawei-cloud-monitoring-query

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/ensure_env.py

No clear malicious behavior is shown. The significant security concern is disabled TLS certificate verification, especially for downloading and executing get-pip.py; this can permit a man-in-the-middle attacker to supply executable code. Dependency installation and sudo package-manager use also have expected but consequential system effects.

Confidence: 97%Severity: 57%
Audit Metadata
Analyzed At
Oct 9, 2026, 01:54 PM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-monitoring-query%2F@ab69c09e5c200d5756ea52aad8f82cceadaf8682df890de35fbe05d52e0aae01