alibabacloud-domain-manage
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install or update the Aliyun CLI by fetching a setup script from 'https://aliyuncli.alicdn.com/setup.sh' and piping it directly to the shell. This is an official installation method provided by Alibaba Cloud (the vendor) and is documented neutrally as a legitimate setup procedure for the necessary tooling.
- [COMMAND_EXECUTION]: Utilizes the 'aliyun' CLI tool to execute domain query actions such as 'query-domain-list' and 'query-domain-by-domain-name'. All operations are strictly read-only, and the skill includes explicit 'pre-flight' checks and 'ai-mode' lifecycle management to ensure execution tracking and auditability.
- [EXTERNAL_DOWNLOADS]: Downloads CLI binaries for multiple platforms (macOS, Linux, Windows) and configuration scripts from the official Alibaba Cloud CDN ('aliyuncli.alicdn.com'). These resources are consistent with the vendor's identity and are required for the skill's functionality.
- [CREDENTIALS_UNSAFE]: The skill implements robust security rules that explicitly forbid the agent from reading, echoing, or printing Alibaba Cloud AccessKey or SecretKey values. It provides clear guidance for checking credential status using non-sensitive commands like 'aliyun configure list' and directs users to configure their environment outside the chat session to prevent credential exposure.
Audit Metadata