alibabacloud-ebs-disk-metric-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the Alibaba Cloud CLI installation script from the vendor's official domain
https://aliyuncli.alicdn.com/setup.sh. - [REMOTE_CODE_EXECUTION]: The installation guide includes a pattern to pipe a remote script to the shell (
curl -fsSL ... | bash). This is recognized as the official setup procedure for the Aliyun CLI provided by the vendor. - [COMMAND_EXECUTION]: The skill executes
aliyunCLI commands, such asaliyun ebs describe-metric-data, to retrieve performance metrics. These commands are within the defined scope of the skill's monitoring purpose. - [PRIVILEGE_ESCALATION]: The installation instructions for macOS and Linux suggest using
sudoto move the installed binary to/usr/local/bin/, which is a standard administrative action for setting up development tools. - [SAFE]: The skill follows security best practices by strictly forbidding the agent from accessing, printing, or requesting access keys, instructing users to manage credentials via environment variables or secure configuration tools outside the agent's context.
Audit Metadata