alibabacloud-agentloop-management
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloads for the Alibaba Cloud CLI setup script from
https://aliyuncli.alicdn.com/setup.shand a Java monitoring agent from Alibaba Cloud's OSS domains (aliyuncs.com). These are verified vendor resources and are considered safe. - [REMOTE_CODE_EXECUTION]: The CLI setup script is executed using a pipe to a shell (
curl | bash). This behavior is triggered as a fallback to ensure the required tool versions are installed, using the vendor's verified CDN. - [COMMAND_EXECUTION]: The skill manages various system and cloud-based commands. To prevent accidental misconfiguration or destruction, it mandates a Two-Phase Execution Protocol for high-impact operations like cluster component installation or workload patching, requiring explicit user approval before execution.
- [DATA_EXFILTRATION]: All CLI commands are instructed to include a 32-character session identifier in the
--user-agentflag. This is used for internal telemetry and log correlation across onboarding steps, which is appropriate for the skill's purpose as an observability tool.
Audit Metadata