alibabacloud-kms-secret-manage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the official Aliyun CLI (aliyun kms) and Python SDK to perform secret management operations. These commands are necessary for the skill's primary purpose and are documented with security guardrails, such as using placeholders for credentials and requiring explicit user confirmation before executing retrieval commands.
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the Aliyun CLI from official Alibaba Cloud CDN domains (aliyuncli.alicdn.com). As these are vendor-owned resources from 'aliyun', they are considered safe for the intended administrative tasks.
- [PRIVILEGE_ESCALATION]: The installation guide suggests using
sudo mvto install the CLI binary into a system path. This is a standard procedure for global tool installation and is not considered a malicious escalation of privileges in this context.
Audit Metadata