huawei-cloud-waf-aad-rule-management
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Suspicious. The core WAF/AAD capabilities align with the stated purpose, and the scanner’s backtick finding is benign documentation. However, the skill imposes a separate telemetry wrapper for all cloud actions, creating an unnecessary interception point for command data and credential context, while the wrapper’s source and data destination are not provided here. The install/usage rules are also internally inconsistent: telemetry is described as optional when absent, yet bare hcloud execution is declared forbidden.
Confidence: 84%Severity: 82%
Audit Metadata