alibabacloud-livedebug
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
aliyunCLI to manage runtime diagnostics. It executes commands for environment verification, service task management, and result querying. The accompanying shell scripts wrap these calls, using proper quoting to handle identifiers and configurations safely. It also performs achmod +xon thealiyuncms2plugin binary during environment setup to ensure functionality. - [EXTERNAL_DOWNLOADS]: Includes instructions for upgrading the Alibaba Cloud CLI tool via its official
upgradecommand. The skill explicitly warns users against piping remote installation scripts directly into the shell, promoting secure software installation practices by encouraging manual inspection of installers. - [DATA_EXFILTRATION]: Transmits diagnostic data (such as Java/Python method logs, snapshots, and metrics) to Alibaba Cloud Simple Log Service (SLS). This behavior is the core intended purpose of the diagnostic tool and utilizes the vendor's secure infrastructure for log storage and querying.
- [SAFE]: The skill implements a 'Two-Phase Execution Protocol' requiring explicit user confirmation before performing destructive actions like deleting probes. It also follows best practices by reading configuration from local files (
.arms-info) and using structured JSON for task definitions, while including detailed documentation on required RAM permissions for least-privileged access.
Audit Metadata