alibabacloud-ecs-gpu-diagnosis
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The skill includes a Base64-encoded string for the
run-commandcontent. Decoding this string reveals a benign shell command for managing the official Alibaba CloudACS-ECS-GpuCheckplugin. - [REMOTE_CODE_EXECUTION]: The skill triggers code execution on remote ECS instances using the
aliyun ecs run-commandandaliyun ecs invoke-commandAPIs. This execution is restricted to a hardcoded, fixed script provided by the skill for diagnostic purposes. - [EXTERNAL_DOWNLOADS]: The installation reference directs users to download the Alibaba Cloud CLI from official vendor-owned domains (
aliyuncli.alicdn.com). - [PRIVILEGE_ESCALATION]: The CLI installation guide uses
sudofor administrative file moves, which is a standard and expected practice for software installation. - [SAFE]: The skill incorporates safety mechanisms including input validation for instance IDs and regions, and an explicit prohibition against any resource deletion actions.
Audit Metadata