alibabacloud-ecs-diagnose
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the official Alibaba Cloud CLI (aliyun-cli) setup script and architecture-specific binaries from the vendor's CDN domain (aliyuncli.alicdn.com). These are recognized vendor-provided resources.
- [REMOTE_CODE_EXECUTION]: Instructions in the skill include a remote execution pattern (curl | bash) for installing the official Aliyun CLI. As this originates from the vendor's verified CDN for the purposes of installing their management tool, it is categorized as a standard administrative setup procedure.
- [COMMAND_EXECUTION]: The skill utilizes high-privilege cloud management commands, including 'aliyun ecs run-command' for guest OS diagnostics and security group modifications. These capabilities are essential to the skill's purpose and are guarded by explicit instructions requiring user confirmation before execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted output from remote ECS instances (logs, metrics, and process lists) during deep diagnostics.
- Ingestion points: Guest OS command results retrieved via 'aliyun ecs describe-invocation-results' in SKILL.md.
- Boundary markers: Strict mandatory report headers and templates defined in the skill documentation.
- Capability inventory: Includes remote script execution, security group rule management, and network configuration modifications.
- Sanitization: The skill utilizes standard Base64 decoding for Cloud Assistant output as per vendor documentation.
Audit Metadata