alibabacloud-ecs-security-group
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official
aliyunCLI to manage cloud resources. These commands are typical for cloud administration and include safeguards like parameter confirmation before execution. - [EXTERNAL_DOWNLOADS]: The documentation references official installation scripts and binaries for the Alibaba Cloud CLI from
aliyuncli.alicdn.com. These are well-known, vendor-owned resources and are considered safe for the intended purpose of the skill. - [DATA_EXPOSURE]: The skill provides comprehensive instructions on how to handle Alibaba Cloud credentials, emphasizing the use of temporary STS tokens and RAM roles rather than hardcoding secret keys. It correctly identifies
~/.aliyun/config.jsonas a sensitive file and provides instructions for securing its permissions. - [REMOTE_CODE_EXECUTION]: The skill includes a one-liner installation command
curl | bashfor the official Alibaba Cloud CLI. While this pattern is generally high-risk, in this context it targets the official vendor domain (aliyuncli.alicdn.com) for a legitimate setup process and is documented as a standard installation method.
Audit Metadata