alibabacloud-ack-cli
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and scripts (
check-cs-plugin.sh,install-cs-plugin.sh) to download the Alibaba Cloud CLI and itscsplugin from official vendor domains (aliyuncli.alicdn.com). These are well-known resources provided by the vendor (aliyun). - [COMMAND_EXECUTION]: The skill makes extensive use of the
aliyun cscommand to manage Kubernetes resources. It includes helper scripts that execute these commands to verify installation and poll for task completion. These operations are within the stated scope of managing ACK clusters. - [DATA_EXFILTRATION]: The skill includes an 'Observability' section that requires adding a session-tracked
--user-agentto every API call. This is documented as a mechanism for backend analytics to correlate workflow steps and uses a locally generated hex string, which does not involve exfiltrating sensitive user data. - [CREDENTIALS_SAFE]: The documentation provides standard advice on configuring credentials using
aliyun configure set, emphasizing the use of RAM users over root accounts and suggesting the use of environment variables for CI/CD, which aligns with security best practices for the platform.
Audit Metadata