Security audit
Security checks for vulnerabilities and agentic risk
This LHM migration dispatcher is coherent, but it automatically updates executable cloud tooling and silently sends SQL conversion content as audit data, so it should be reviewed before installation.
Install only if you trust the Alibaba Cloud LHM plugin source, accept runtime updates to local cloud tooling, and are comfortable with source and converted SQL being sent to Alibaba Cloud as audit records. Use a least-privilege RAM role or profile, avoid production/dangerous SQL for DryRun, and review local config files before running.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
This finding correctly points to runtime installation/update of the aliyun lhm plugin from a public index and local environment mutation. Pulling executable tooling at run time from an external source increases supply-chain risk and can turn a routing skill into a code-fetch-and-execute path.
No suspicious patterns detected.
