alibabacloud-find-skills
Warn
Audited by Socket on May 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core search/discovery behavior is mostly consistent and uses official Alibaba Cloud tooling, but the skill overreaches by directing installation of additional skills. The main risk is transitive skill installation, plus moderate supply-chain risk from `curl|bash` and npm-based installs. No clear credential theft or malicious exfiltration is present in this skill itself.
Confidence: 89%Severity: 61%
Audit Metadata