alibabacloud-ecs-disk-ops

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the Aliyun CLI via a shell script download (curl | bash) from 'aliyuncli.alicdn.com'. This is the official distribution channel for the vendor's CLI tool and is considered a safe reference to a trusted vendor resource.
  • [COMMAND_EXECUTION]: The skill performs administrative actions on remote cloud instances using the 'aliyun ecs run-command' API. This includes executing shell scripts to resize disk partitions (e.g., 'growpart', 'resize2fs'). While this is a high-privilege capability, it is integral to the skill's purpose and uses standard cloud provider functionality.
  • [DYNAMIC_EXECUTION]: The skill uses Base64 encoding to prepare shell script payloads for remote execution via the Aliyun CLI. This is a standard requirement for the 'aliyun ecs run-command' tool and does not indicate malicious obfuscation as the script content is explicitly defined in the instructions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from the cloud environment (resource names, IDs, status) which could theoretically contain malicious instructions. However, the skill mitigates this risk by requiring explicit user confirmation for all customizable parameters before any command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 06:10 AM