alibabacloud-agent-toolkit-install
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the uv package manager installation script from the well-known service Astral.sh.
- [EXTERNAL_DOWNLOADS]: Fetches the Alibaba Cloud CLI installation scripts and binary packages from the official vendor CDN domain (aliyuncli.alicdn.com).
- [REMOTE_CODE_EXECUTION]: Executes remote installation scripts via shell piping and subshells. The skill specifies a 'Confirm' risk level for these actions, instructing the agent to show the full command and wait for explicit user approval before execution.
- [COMMAND_EXECUTION]: Invokes various local CLI tools including uv, aliyun, and npx to configure the environment, install plugins, and verify the user's authentication and identity status.
- [PERSISTENCE]: The provided Windows PowerShell script for the Alibaba Cloud CLI modifies the User-level PATH environment variable in the registry to ensure the tool remains available in subsequent terminal sessions.
- [PRIVILEGE_ESCALATION]: Utilizes the PowerShell '-ExecutionPolicy Bypass' parameter to allow the execution of the local CLI installer script on Windows systems.
- [INDIRECT_PROMPT_INJECTION]: Clones the official vendor repository from GitHub to install the agent toolkit. To mitigate risks from external data, the skill requires the agent to perform structural and content validation on the downloaded JSON manifests before they are processed or registered.
Audit Metadata