huawei-cloud-mrs-host-alarm-diagnose

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/lakewatch_api_config.yaml

The file is a declarative LakeWatch API configuration and contains no evident malware or malicious payload. The principal security risks are disabled SSL certificate verification and manager proxy endpoints that accept target_url without a visible allowlist or strict validation. These risks depend on the unseen implementation enforcing parameter validation and restricting proxy destinations. The administrative username is exposed, but no password or secret is included.

Confidence: 96%Severity: 62%
Audit Metadata
Analyzed At
Sep 23, 2026, 08:47 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-mrs-host-alarm-diagnose%2F@392b0ee46571c3618574ccf6c642ae6fd514515d1e622c1998b33e1ada39aab1