The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes the aliyun CLI binary via the scripts/agentloop_eval.py wrapper script. The implementation uses subprocess.run with list-based arguments and explicitly avoids shell=True, effectively preventing shell injection attacks. Furthermore, the _validate_command function provides defense-in-depth by ensuring that no command arguments contain null bytes or newline characters that could be used to manipulate command behavior.
[EXTERNAL_DOWNLOADS]: The documentation in references/cli-installation-guide.md provides instructions for downloading the Alibaba Cloud CLI setup script from the vendor's official CDN (aliyuncli.alicdn.com). The instructions emphasize security by advising the user to download and review the script before execution, and specifically warn against the unsafe practice of piping curl output directly into bash.

alibabacloud-agentloop-evaluation