alibabacloud-cli-guidance
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions for macOS and Linux utilize a pattern where a setup script is downloaded and piped directly to the shell (e.g.,
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash). This is the official installation method for the Aliyun CLI tool provided by the vendor. - [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and compressed binary archives from the vendor's domain
aliyuncli.alicdn.com. These downloads are part of the intended purpose of setting up the CLI environment. - [PRIVILEGE_ESCALATION]: Manual installation instructions for Linux include using
sudoto move the downloaded binary to a system path (/usr/local/bin/). This is a standard administrative action for installing software system-wide. - [COMMAND_EXECUTION]: The skill relies on the
aliyunCLI and shell commands to manage cloud resources, install plugins, and configure credentials. It guides the user in using these tools for legitimate cloud operations. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes user-provided parameters to construct CLI commands and manages interactions with cloud APIs.
- Ingestion points: User-supplied parameter values and CLI output (e.g., from
describe-instances) processed by the agent. - Boundary markers: None explicitly used to delimit external data in command templates.
- Capability inventory: Shell execution via Bash tool and resource management via the
aliyunCLI. - Sanitization: Relies on the Aliyun CLI's internal parameter validation and the structured nature of its API responses.
Audit Metadata