alibabacloud-alinux-sysom-inspection
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The SKILL.md file contains a command to download and execute an installation script from an external vendor-owned domain (aliyuncs.com) using a curl | bash pattern. This allows for the execution of remote code on the system.
- [PRIVILEGE_ESCALATION]: The suggested installation command utilizes sudo to execute the setup script with administrative privileges.
- [EXTERNAL_DOWNLOADS]: The skill fetches a shell script from Alibaba Cloud OSS and installs Python dependencies from public registries at runtime.
- [DYNAMIC_EXECUTION]: The entry point script scripts/sysom_cli/main.py uses subprocess.check_call to automatically install missing Python packages using pip during execution.
- [COMMAND_EXECUTION]: The skill executes the sysom-osops system CLI and local shell scripts to perform diagnostic tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Alibaba Cloud APIs and renders the results into reports, creating a surface for indirect instruction injection.
- Ingestion points: GetInspectionReport and GetDiagnosisResult API responses processed in scripts/sysom_cli/inspection/command.py.
- Boundary markers: Not present.
- Capability inventory: Shell command execution via subprocess, file system modification.
- Sanitization: Basic formatting sanitization is present, but it lacks specific security filtering for LLM instructions.
Audit Metadata