alibabacloud-analyticdb-mysql-copilot
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a setup script from Alibaba Cloud's official CDN at https://aliyuncli.alicdn.com/setup.sh. This is a standard and expected installation resource provided by the vendor for their CLI tool.
- [COMMAND_EXECUTION]: The skill's core functionality relies on executing aliyun CLI commands to manage and diagnose AnalyticDB clusters. It includes specific instructions for managing AI-mode and user-agents within the CLI environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user natural language queries and interpolates them into shell commands. 1. Ingestion points: The user's diagnosis question is captured and passed to the aliyun adbai command. 2. Boundary markers: The query input is wrapped in double quotes in the command string. 3. Capability inventory: The skill uses the aliyun CLI to perform cluster inspection and diagnosis operations. 4. Sanitization: No explicit sanitization or filtering of the natural language query is present beyond shell quoting.
- [PRIVILEGE_ESCALATION]: The provided installation guide suggests using sudo to move the aliyun binary to /usr/local/bin/, which is a standard administrative procedure for software installation.
Recommendations
- HIGH: Downloads and executes remote code from: https://aliyuncli.alicdn.com/setup.sh - DO NOT USE without thorough review
Audit Metadata