loongsuite-pilot-ops
Fail
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts, glibc patches, and agent packages from vendor-owned Alibaba Cloud OSS buckets (*.aliyuncs.com).
- [REMOTE_CODE_EXECUTION]: Uses the standard curl | bash pattern to execute installation and configuration scripts provided by the vendor. This behavior is consistent with the primary purpose of managing the telemetry collector.
- [PRIVILEGE_ESCALATION]: Instructions to the AI agent explicitly request execution with required_permissions: ["all"] to allow for system-level management tasks including service registration and process monitoring. It also utilizes sudo for installation on Linux environments.
- [PERSISTENCE]: Configures and manages background services using standard system tools like launchd on macOS and systemd on Linux to ensure the collector runs continuously.
- [INDIRECT_PROMPT_INJECTION]: The collector ingests and processes activity logs (transcripts) from third-party agents. This ingestion surface is managed by internal content policies and a dedicated data masking layer to prevent accidental disclosure or execution of embedded instructions.
- [COMMAND_EXECUTION]: Implements various utility scripts that execute shell commands to discover local agent installations, render activity reports, and update configuration files.
- [DYNAMIC_EXECUTION]: Utilizes a daemon-bootstrap pattern where the core collector logic is dynamically imported from versioned local directories, facilitating updates and rollbacks.
Recommendations
- HIGH: Downloads and executes remote code from: https://loongcollector-community-edition.oss-cn-shanghai.aliyuncs.com/loongsuite-pilot/installer.sh - DO NOT USE without thorough review
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata