huawei-cloud-optv-evolve-management

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
references/iam-agency.md

The fragment is operational IAM documentation for granting an OptVerse service broad, persistent access to OBS resources. It shows no direct malware or obfuscated executable behavior, but the `FOREVER` trust relationship, `iam:agencies:assume`, and broad bucket/object administration permissions create a significant cloud security risk. The trust target and required scope should be independently verified, and least-privilege, resource restrictions, temporary duration, and review/approval controls should be considered.

Confidence: 95%Severity: 86%
Audit Metadata
Analyzed At
Sep 24, 2026, 06:11 PM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-optv-evolve-management%2F@7ef7909f1dc2bf5470d1bc53d4e02b55afda940a022118660964fa956d84849c