alibabacloud-loongcollector-ops

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes instructions to install or upgrade the Aliyun CLI by downloading and executing a shell script directly from the vendor's official CDN at https://aliyuncli.alicdn.com/setup.sh. This is a documented installation method for the service.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the aliyun-cli-sls plugin and the CLI setup script from Alibaba Cloud's official infrastructure. These resources are necessary for the skill's primary function and originate from the vendor's own domains.
  • [COMMAND_EXECUTION]: The skill executes multiple local utility scripts located in the scripts/ directory for tasks such as preflight checks, pipeline validation, and output redaction. It also invokes the aliyun sls command to perform cloud operations.
  • [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill ingests data from external SLS Logstores using get-logs-v2 commands, which could contain untrusted user-generated content. 2. Boundary markers: The instructions define strict status tokens to manage control flow, though there are no explicit delimiters for the processed log data. 3. Capability inventory: The skill possesses capabilities to modify cloud collection configurations, manage machine groups, and execute local Python scripts. 4. Sanitization: The skill includes a dedicated redact_output.py script specifically designed to identify and mask credentials in command outputs before they are processed further or displayed.
  • [SAFE]: The skill contains explicit, high-priority security instructions for the agent, such as NEVER read, echo, or print AK/SK values and NEVER use cat... on credential files. These rules provide robust protection against credential harvesting and unauthorized access to sensitive local configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 01:06 PM