alibabacloud-agentloop-management

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references downloads for the Alibaba Cloud CLI setup script from https://aliyuncli.alicdn.com/setup.sh and a Java monitoring agent from Alibaba Cloud's OSS domains (aliyuncs.com). These are verified vendor resources and are considered safe.
  • [REMOTE_CODE_EXECUTION]: The CLI setup script is executed using a pipe to a shell (curl | bash). This behavior is triggered as a fallback to ensure the required tool versions are installed, using the vendor's verified CDN.
  • [COMMAND_EXECUTION]: The skill manages various system and cloud-based commands. To prevent accidental misconfiguration or destruction, it mandates a Two-Phase Execution Protocol for high-impact operations like cluster component installation or workload patching, requiring explicit user approval before execution.
  • [DATA_EXFILTRATION]: All CLI commands are instructed to include a 32-character session identifier in the --user-agent flag. This is used for internal telemetry and log correlation across onboarding steps, which is appropriate for the skill's purpose as an observability tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 11:09 AM
Security Audit — agent-trust-hub — alibabacloud-agentloop-management