alibabacloud-ecs-diagnose

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the official Alibaba Cloud CLI (aliyun-cli) setup script and architecture-specific binaries from the vendor's CDN domain (aliyuncli.alicdn.com). These are recognized vendor-provided resources.
  • [REMOTE_CODE_EXECUTION]: Instructions in the skill include a remote execution pattern (curl | bash) for installing the official Aliyun CLI. As this originates from the vendor's verified CDN for the purposes of installing their management tool, it is categorized as a standard administrative setup procedure.
  • [COMMAND_EXECUTION]: The skill utilizes high-privilege cloud management commands, including 'aliyun ecs run-command' for guest OS diagnostics and security group modifications. These capabilities are essential to the skill's purpose and are guarded by explicit instructions requiring user confirmation before execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted output from remote ECS instances (logs, metrics, and process lists) during deep diagnostics.
  • Ingestion points: Guest OS command results retrieved via 'aliyun ecs describe-invocation-results' in SKILL.md.
  • Boundary markers: Strict mandatory report headers and templates defined in the skill documentation.
  • Capability inventory: Includes remote script execution, security group rule management, and network configuration modifications.
  • Sanitization: The skill utilizes standard Base64 decoding for Cloud Assistant output as per vendor documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 07:06 PM