alicloud-network-esa

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill aligns well with its stated purpose of managing Alibaba Cloud ESA resources via Python SDK/OpenAPI. It uses standard credential mechanisms (env vars or config files) and official SDKs, and communicates with official Alibaba Cloud endpoints. The footprint is proportionate to cloud-management tasks. Minor concerns include potential credential exposure in logs and the breadth of permissions implied; these can be mitigated with strict IAM policies, credential handling best practices, and ensuring output does not leak secrets. Overall, the risk posture is BENIGN with low-to-medium security considerations (primarily around credentials handling and logging).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 10:17 AM
Package URL
pkg:socket/skills-sh/cinience%2Falicloud-skills%2Falicloud-network-esa%2F@e47fe4bd2d612e67314f4fe0905c4f4e05a9107a