alibabacloud-csas-device-health-monitor
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install or upgrade the Alibaba Cloud CLI using a shell script downloaded from the official vendor CDN (https://aliyuncli.alicdn.com/setup.sh). This script is executed via command substitution within a bash shell.\n- [COMMAND_EXECUTION]: The skill utilizes a bash script,
scripts/device-health.sh, to manage fleet scanning and device reporting. This script invokes thealiyunCLI andjqto interact with cloud services and process results. It also performs local plugin management usingaliyun plugin install.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests external telemetry data (CPU, memory, battery, and device status) from Alibaba Cloud APIs, which could serve as an attack surface for indirect prompt injection if the cloud data were compromised.\n - Ingestion points:
scripts/device-health.shretrieves JSON data from thealiyun csascommand suite.\n - Boundary markers: No explicit delimiters are used for the raw API data, though the skill provides strict formatting rules for the final summary reports.\n
- Capability inventory: The skill can execute shell commands via the Aliyun CLI and write local state to a resume file (
.device-health-state/scan.json).\n - Sanitization: The skill employs
jqfor robust parsing and filtering of JSON responses, ensuring that only expected fields are processed.
Audit Metadata