alibabacloud-agent-toolkit-install

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Mostly official Alibaba domains (aliyun.com / alicdn.com) which are generally legitimate, but the presence of direct downloadable archives/executables and pipe-to-shell installer scripts (aliyuncli install.sh, astral.sh install.sh/install.ps1) — plus a third‑party host (astral.sh) — are high‑risk patterns that should be verified before running.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Step 7 runs npx openplugin aliyun/alibabacloud-agent-toolkit, which at runtime downloads/installs an outsider-authored package from the public npm registry and thus can feed its README/metadata/code text into the agent’s LLM context via plugin installation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes multiple runtime installer downloads that fetch and execute remote code—specifically: https://astral.sh/uv/install.sh and https://astral.sh/uv/install.ps1 (pipe-to-shell installers for uv), https://aliyuncli.alicdn.com/install.sh and the Windows download URL pattern https://aliyuncli.alicdn.com/aliyun-cli-windows-$Version-amd64.zip (used by the included PowerShell installer), and the npx invocation (npx openplugin aliyun/alibabacloud-agent-toolkit)—all of which are used at runtime to retrieve and run external code and are required for the installation steps.