The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the Aliyun CLI and ossutil binaries from official Alibaba Cloud infrastructure (aliyuncli.alicdn.com and gosspublic.alicdn.com) as documented in the installation guides. These are trusted vendor sources.\n- [REMOTE_CODE_EXECUTION]: Instructions provided in SKILL.md and cli-installation-guide.md include installation patterns such as 'curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash'. Since these target the official vendor's installation script, they are evaluated as safe functionality for tool setup.\n- [PRIVILEGE_ESCALATION]: The installation guides for CLI tools recommend using 'sudo' to move binaries into system PATH directories (e.g., /usr/local/bin/). This is standard administrative behavior for software installation.\n- [COMMAND_EXECUTION]: The skill extensively uses the 'aliyun' CLI tool and Python scripts to perform bucket operations, upload files, and execute metadata queries. All commands are scoped to OSS management and include specific User-Agent strings for identification.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied search terms for semantic and scalar queries. The implementation in 'scripts/semantic_query.py' uses 'xml.sax.saxutils.escape' to sanitize inputs before they are interpolated into the XML search body, providing protection against basic injection attacks.

alibabacloud-oss-manage-metaquery