alibabacloud-ecs-reboot-or-crash-diagnosis

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the official aliyun-cli (version 3.3.3+) to interact with Alibaba Cloud APIs. It performs administrative tasks such as confirming instance status, querying platform maintenance events, and retrieving command execution results. This is standard and expected functionality for a cloud infrastructure diagnostic skill.
  • [REMOTE_CODE_EXECUTION]: Diagnostic scripts are executed remotely on target instances via the aliyun ecs run-command API using the official Cloud Assistant service. This includes running shell scripts on Linux and PowerShell scripts on Windows to collect system logs and crash dump information. These operations are performed through the vendor's authorized management channels.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests untrusted data from the target instance, specifically system logs (e.g., /var/log/messages, /var/log/syslog), kernel logs (dmesg), and reboot history retrieved via the DescribeInvocations API.
  • Boundary markers: The agent is provided with strict output formatting instructions and templates in references/output-format.md to ensure the diagnostic report follows a predictable structure.
  • Capability inventory: Across its scripts, the skill can perform Alibaba Cloud API calls and execute further remote commands on instances.
  • Sanitization: The skill decodes Base64 output from the API but does not implement explicit sanitization to filter potential instructions hidden within the system logs of a compromised instance. However, the risk is mitigated by the skill's focus on reporting and diagnostic analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:05 PM