alibabacloud-emr-spark-manage
Fail
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute a setup script directly into the shell for the Alibaba Cloud CLI.
- Evidence: The command
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bashis recommended inSKILL.mdto update the CLI tool. The source URLaliyuncli.alicdn.comis an official vendor resource for Alibaba Cloud. - [INDIRECT_PROMPT_INJECTION]: The skill includes capabilities to read external data, specifically job logs from Alibaba Cloud OSS storage, which could contain untrusted content.
- Ingestion points:
references/api-reference.mdandreferences/job-management.mddetail methods to fetch log content (e.g.,stdout.log,stderr.log) from OSS buckets via thelist-log-contentscommand. - Boundary markers: The skill does not provide specific delimiters or instructions to the agent to disregard potential instructions embedded within the retrieved log data.
- Capability inventory: The agent has the capability to execute a wide range of Alibaba Cloud CLI commands, including resource creation, modification, and RAM policy management.
- Sanitization: No sanitization or validation steps are documented for the retrieved log content before the agent processes or interprets it.
- [COMMAND_EXECUTION]: The skill's primary function is the execution of system shell commands via the
aliyunCLI tool to manage cloud infrastructure and Spark workloads. - [PRIVILEGE_ESCALATION]: The skill contains instructions for managing Identity and Access Management (RAM) policies, which involves granting permissions to users.
- Evidence:
references/ram-policies.mdprovides commands likealiyun ram attach-policy-to-userto grant administrative or developer permissions. While these are administrative functions inherent to the skill's purpose, they represent highly privileged operations.
Recommendations
- HIGH: Downloads and executes remote code from: https://aliyuncli.alicdn.com/setup.sh - DO NOT USE without thorough review
Audit Metadata