alicloud-data-lake-dlf-next
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose of managing Alibaba Cloud Data Lake Formation (DlfNext) via OpenAPI/SDK, with credential handling limited to environment variables or a standard credentials file and API interactions to official endpoints. No unverifiable binaries or external download-execute chains are present. Key security concerns center on proper handling of credentials and securing outputs to prevent leakage, but the overall design is proportionate to its cloud-management objective. Recommend enforcing least-privilege access, secure logging, and explicit user prompts for mutating operations when region is ambiguous.
Confidence: 98%
Audit Metadata