alibabacloud-cfw-status-overview
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a setup script (setup.sh) located on Alibaba Cloud's official CDN (aliyuncli.alicdn.com). As this is a well-known service and the vendor's own infrastructure, this is considered a safe resource.
- [REMOTE_CODE_EXECUTION]: Instructions are provided to download and execute the vendor's setup script using curl piped to bash. This is a standard installation method for the Aliyun CLI and originates from a trusted source.
- [COMMAND_EXECUTION]: The skill relies on executing shell commands via the aliyun CLI. It includes requirements for using a custom user-agent string and specific configuration modes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from cloud APIs. While it lacks explicit boundary markers, the input is retrieved directly from the vendor's authenticated API services. 1. Ingestion points: JSON outputs from aliyun cloudfw commands. 2. Boundary markers: Not present. 3. Capability inventory: Execution of local shell commands. 4. Sanitization: Uses jq for filtering.
Audit Metadata