alibabacloud-cli-guidance

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit runtime install commands that fetch and execute remote code (e.g., curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash and wget ... https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz | tar xz), so the URL https://aliyuncli.alicdn.com/setup.sh (and related aliyuncli.alicdn.com binaries) is used to execute remote code during runtime.