alibabacloud-cas-ssl-cert-deploy
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install commands that download and execute remote installer binaries/scripts (e.g., curl -o "$HOME/aliyun-cli-setup.sh" https://aliyuncli.alicdn.com/setup.sh and wget|tar downloads of https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz etc.), which fetch remote code and then execute it, making these URLs runtime-executed dependencies.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata