alicloud-media-video-translation
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileThe skill title and description align with a legitimate use case: submitting and managing Alibaba Cloud IMS video translation jobs via OpenAPI with OSS-based inputs/outputs. The footprint is proportionate: it requires standard cloud API credentials and access to OSS for storage, and it performs only service API calls and artifact handling within the scope of video translation tasks. There is no evidence of downloading or executing unverifiable binaries, no inappropriate data routing to third-party domains, and no arbitrary file access beyond the specified OSS inputs/outputs. However, there are security considerations around handling of cloud credentials (environment variables) and the need for explicit validation of user inputs and proper logging. Overall: Benign with moderate caution (suspicious-sounding permissions are not present; credentials handling could be tightened with clearer security practices).