alibabacloud-apigw-inspection
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the Aliyun CLI by piping a remote setup script directly into bash.\n
- Evidence:
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bashfound inSKILL.mdandreferences/cli-installation-guide.md.\n - Context: The script is hosted on the official Alibaba Cloud CDN domain (
alicdn.com), which is controlled by the skill's author.\n- [EXTERNAL_DOWNLOADS]: The skill downloads CLI binaries and installs plugins from remote repositories.\n - Evidence: Downloads are fetched from
aliyuncli.alicdn.comand the officialaliyun-cliGitHub repository.\n - Evidence: Runtime plugin installation is performed using
aliyun plugin install --names apig.\n- [COMMAND_EXECUTION]: The skill utilizes the Aliyun CLI to perform various read-only operations on cloud resources.\n - Evidence: Execution of
aliyun apig list-gateways,aliyun cloudapi describe-instances, andaliyun cms describe-metric-datato retrieve configuration and performance metrics.
Audit Metadata