admin-devops
Warn
Audited by Socket on Mar 10, 2026
1 alert found:
SecuritySecurityscripts/oci-cleanup-compartment.sh
MEDIUMSecurityMEDIUM
scripts/oci-cleanup-compartment.sh
This script is a legitimate OCI compartment cleanup tool that performs destructive operations (terminates instances, deletes volumes, networks, load balancers, and finally the compartment). It requires explicit user confirmation (typing 'DELETE') but otherwise will forcibly delete resources using the active oci CLI credentials. I found no signs of malware, credential exfiltration, or obfuscation. The primary risk is operational: if run with privileged credentials or the wrong compartment OCID, it will irreversibly delete resources. The script also suppresses many error outputs and uses --force, which can hide failures and lead to partial cleanup without clear error messages.
Confidence: 90%Severity: 70%
Audit Metadata