qwencloud-observe

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
references/ram_policies.md

The fragment is a declarative Alibaba Cloud RAM policy for infrastructure observability. It does not contain malware or obfuscated code, but it presents a meaningful security risk because Resource:* is used with ECS command execution and monitoring-agent installation. The policy should be tightened with resource and condition restrictions, explicit command controls, and careful handling of billing data and slow-log contents. The supplied text does not implement the stated Forbidden.RAM behavior; it only documents it.

Confidence: 98%Severity: 64%
Audit Metadata
Analyzed At
Sep 14, 2026, 08:23 AM
Package URL
pkg:socket/skills-sh/qwencloud%2Fqwencloud-deploy%2Fqwencloud-observe%2F@2ebb81741c3d659ff48a48d051233a80fcad1b44a712368ecbf38526e493702a