huawei-cloud-waf-aad-rule-management

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Suspicious. The core WAF/AAD capabilities align with the stated purpose, and the scanner’s backtick finding is benign documentation. However, the skill imposes a separate telemetry wrapper for all cloud actions, creating an unnecessary interception point for command data and credential context, while the wrapper’s source and data destination are not provided here. The install/usage rules are also internally inconsistent: telemetry is described as optional when absent, yet bare hcloud execution is declared forbidden.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Sep 24, 2026, 06:09 PM
Package URL
pkg:socket/skills-sh/huaweicloud%2Fhuaweicloud-skills%2Fhuawei-cloud-waf-aad-rule-management%2F@a53f817d82c012cc2019528df5778b2fae0b26e45f3710674a860472896602f5