huawei-cloud-obs-upload

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
references/task-scheduled-upload.md

This code fragment implements a transparent, scheduled directory uploader (backup/sync style) that repeatedly transfers a user-chosen local directory to a user-specified OBS bucket/prefix and writes execution logs to $HOME. No clear malware indicators (obfuscation, credential theft, covert networking, or hidden execution) are present. The main security concerns are (1) high-impact data exfiltration capability by design if misused, and (2) missing demonstrated input escaping/quoting when embedding user-supplied parameters into shell/PowerShell commands, which could cause unintended behavior or injection in a generation context. Review and harden parameter sanitization/quoting and ensure deterministic execution paths (e.g., full obsutil path).

Confidence: 62%Severity: 55%
Audit Metadata
Analyzed At
Jun 26, 2026, 01:45 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-obs-upload%2F@ef401bd5cd2a7daf50ccb6e7923898af473c9692d80f9d6f4e04c090f5d49c67
Security Audit — socket — huawei-cloud-obs-upload