alibabacloud-loongcollector-ops
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official Alibaba Cloud CLI setup script from the vendor's domain (aliyuncli.alicdn.com). This is a standard installation procedure for the required management tools and originates from a trusted vendor source.
- [CREDENTIALS_UNSAFE]: The skill mentions the location of cloud credential files (e.g., ~/.aliyun/config.json) to allow for existence checks but includes strict, mandatory instructions that forbid the agent from reading, printing, or otherwise exposing the contents of these files. It uses built-in CLI status commands to verify configuration status safely without accessing secrets.
- [COMMAND_EXECUTION]: The skill relies on the aliyun command-line interface and several bundled utility scripts (such as preflight.sh, render_pipeline.py, and validate_pipeline.py) to manage log collection resources. All destructive or state-changing operations are gated by a mandatory human-in-the-loop approval process with normalized diffing.
- [SAFE]: The skill demonstrates a high level of security awareness, incorporating specific safeguards against prompt injection and unauthorized data access. Its design focuses on least-privilege RAM policies and robust validation of configuration payloads.
Audit Metadata