huawei-cloud-sms-host-migrator

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/test-cli-commands.sh

This is a functional test runner, but it executes commands from test-vars.json as shell code via eval. Use only with trusted, reviewed test configuration; untrusted configuration can cause arbitrary command execution with the script user's privileges. No direct malware behavior is evident in the script itself.

Confidence: 99%Severity: 72%
Audit Metadata
Analyzed At
Sep 30, 2026, 08:08 AM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-sms-host-migrator%2F@d1f2278fbf943aafe3ab9697a7968bd5f12e9ef53f95971a12e5625eb99eed0a