alicloud-data-lake-dlf-next

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose of managing Alibaba Cloud Data Lake Formation (DlfNext) via OpenAPI/SDK, with credential handling limited to environment variables or a standard credentials file and API interactions to official endpoints. No unverifiable binaries or external download-execute chains are present. Key security concerns center on proper handling of credentials and securing outputs to prevent leakage, but the overall design is proportionate to its cloud-management objective. Recommend enforcing least-privilege access, secure logging, and explicit user prompts for mutating operations when region is ambiguous.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 10:16 AM
Package URL
pkg:socket/skills-sh/cinience%2Falicloud-skills%2Falicloud-data-lake-dlf-next%2F@3a6ff046a0215a18da2474360f733e89ecab5d8b