CLS CLI

• Analyzed: Apr 14, 2026, 2:41 PM
• Findings: 1
• Version: 1.0.0
• Hash: 9b1ca804cf59fd7e561d00197eb317d44c963e228b4034c6657332afae35454e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate CLI tool (cls-cli) for managing Tencent Cloud Log Service (CLS). It includes features for log searching, configuration management, and automated upgrades via GitHub. While the tool handles sensitive API credentials (SecretID/Key) and performs system-level operations like binary replacement during upgrades (cls-cli/cmd/upgrade.go) and generating installation scripts for the LogListener agent (cls-cli/shortcuts/loglistener/loglistener.go), these actions are consistent with its stated purpose and use official Tencent mirrors or public GitHub repositories. No evidence of data exfiltration, malicious prompt injection, or intentional backdoors was found.