alibabacloud-lingjun-node-ops
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Alibaba Cloud CLI setup script from
https://aliyuncli.alicdn.com/setup.sh. This is an official resource from the authoring vendor.\n- [REMOTE_CODE_EXECUTION]: The installation process involves piping a remote script from the vendor's CDN to bash. This pattern is used to install the official command-line interface and originates from the author's trusted infrastructure.\n- [COMMAND_EXECUTION]: The skill allows the agent to execute shell commands on target nodes through therun-commandAPI. This is an intended functionality for performing node maintenance and lifecycle operations.\n- [PRIVILEGE_ESCALATION]: The documentation mentions usingsudofor tool installation if permission issues occur on the local system, which is standard procedure for configuring system-level cloud management tools.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Alibaba Cloud API responses, creating a surface for indirect injection.\n - Ingestion points: Data enters the context via
list-cluster-nodes,describe-node, anddescribe-taskas documented inSKILL.md.\n - Boundary markers: A mandatory single-step parameter confirmation gate is implemented in
SKILL.mdandreferences/parameter-confirmation.md.\n - Capability inventory: The skill performs cloud operations via the
aliyunCLI across all scripts referenced inSKILL.mdandreferences/scripts.md.\n - Sanitization: Sensitive information like passwords and AccessKeys are automatically redacted in all user-facing output, and commands are enclosed in single quotes for shell safety.
Audit Metadata