huawei-cloud-obs-upload
Warn
Audited by Snyk on Jun 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill includes installation commands that fetch and execute remote install scripts/binaries at runtime — for example "curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y" (and similar obsutil download URLs such as https://obs-community.obs.cn-north-1.myhuaweicloud.com/obsutil/current/...), which download remote code that is then executed and are required prerequisites.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata