alibabacloud-oss-media-process
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a setup script from the official Aliyun CLI domain at aliyuncli.alicdn.com.\n- [REMOTE_CODE_EXECUTION]: Installation instructions in SKILL.md involve piping a remote script to the bash shell for environment setup.\n- [COMMAND_EXECUTION]: The scripts/process.py utility executes ffprobe via subprocess to verify the properties of processed media files.\n- [DYNAMIC_EXECUTION]: The scripts/process.py script uses importlib.import_module() to verify that required SDK dependencies are correctly installed before execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media data and metadata from external sources, which is a common vulnerability surface for media tools.\n
- Ingestion points: scripts/process.py (--source and --uri parameters).\n
- Boundary markers: The skill uses structured JSON for tool outputs.\n
- Capability inventory: Network access for SDK operations and URI downloads, file system write access for processed outputs, and subprocess execution for media validation.\n
- Sanitization: Includes logic to redact sensitive signing parameters from generated URLs before they are presented in the output.
Recommendations
- HIGH: Downloads and executes remote code from: https://aliyuncli.alicdn.com/setup.sh - DO NOT USE without thorough review
Audit Metadata