ipv6-ddns-aliyun

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该 skill 的核心能力与 DDNS 目的基本一致,所需阿里云凭证和 DNS 修改行为也属功能必需;但它依赖自动安装第三方 skill,并把敏感凭证的实际使用委托给该依赖,形成明显的供应链和转itive 信任风险。整体更适合判定为 SUSPICIOUS 而非恶意。

Confidence: 86%Severity: 69%
Audit Metadata
Analyzed At
Apr 12, 2026, 03:24 AM
Package URL
pkg:socket/skills-sh/shigzz%2Faliyun-skills%2Fipv6-ddns-aliyun%2F@bb918099d2eaa8c595e789801f0007f3d626ce20