alibabacloud-loongcollector-ops
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to install or upgrade the Aliyun CLI by downloading and executing a shell script directly from the vendor's official CDN at
https://aliyuncli.alicdn.com/setup.sh. This is a documented installation method for the service. - [EXTERNAL_DOWNLOADS]: The skill fetches the
aliyun-cli-slsplugin and the CLI setup script from Alibaba Cloud's official infrastructure. These resources are necessary for the skill's primary function and originate from the vendor's own domains. - [COMMAND_EXECUTION]: The skill executes multiple local utility scripts located in the
scripts/directory for tasks such as preflight checks, pipeline validation, and output redaction. It also invokes thealiyun slscommand to perform cloud operations. - [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill ingests data from external SLS Logstores using
get-logs-v2commands, which could contain untrusted user-generated content. 2. Boundary markers: The instructions define strict status tokens to manage control flow, though there are no explicit delimiters for the processed log data. 3. Capability inventory: The skill possesses capabilities to modify cloud collection configurations, manage machine groups, and execute local Python scripts. 4. Sanitization: The skill includes a dedicatedredact_output.pyscript specifically designed to identify and mask credentials in command outputs before they are processed further or displayed. - [SAFE]: The skill contains explicit, high-priority security instructions for the agent, such as
NEVER read, echo, or print AK/SK valuesandNEVER use cat... on credential files. These rules provide robust protection against credential harvesting and unauthorized access to sensitive local configuration files.
Audit Metadata