alibabacloud-ram-permission-diagnose

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the installation and update of the Alibaba Cloud CLI by downloading a shell script from the vendor's official CDN at https://aliyuncli.alicdn.com/setup.sh and executing it directly via a bash pipe.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform cloud environment management tasks. This includes executing aliyun CLI commands to resolve identities, query existing policies, and apply permission repairs such as creating or attaching RAM policies as documented in references/ram-cli-commands.md.
  • [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface due to its reliance on parsing external command outputs to guide its logic.
  • Ingestion points: Results from aliyun CLI commands, including decoded diagnostic messages and policy definitions, are ingested into the agent's context as seen in SKILL.md and references/diagnose-flow.md.
  • Boundary markers: The instructions lack explicit boundary markers or directions for the agent to ignore potentially malicious instructions embedded in tool outputs.
  • Capability inventory: The skill has broad capabilities to modify cloud environment configurations through shell-based CLI operations.
  • Sanitization: No specific sanitization or validation logic is defined for the data returned from cloud APIs before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 01:50 PM
Security Audit — agent-trust-hub — alibabacloud-ram-permission-diagnose