alibabacloud-cfw-status-overview

Warn

Audited by Snyk on Jun 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill mandates running system-altering shell commands (enabling/disabling AI-mode, changing CLI config, running aliyun plugin update, and conditionally executing curl ... | bash to install/update the CLI), which modify the host environment and can install software — so it pushes the agent to change the machine state beyond read-only operations.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

  • Hidden Unicode characters detected (1 type(s) found)

Issues (2)

W013
MEDIUM

Attempt to modify system services in skill instructions.

W021
MEDIUM

Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 01:03 AM
Issues
2
Security Audit — snyk — alibabacloud-cfw-status-overview