alibabacloud-pds-intelligent-workspace
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches CLI installation scripts and binary archives from the vendor's official distribution domains (
aliyuncli.alicdn.com,alicdn.com). - [REMOTE_CODE_EXECUTION]: Installs the Alibaba Cloud CLI by piping a remote script directly to the shell (
curl ... | bash), targeting a vendor-controlled domain as part of the initial setup. - [COMMAND_EXECUTION]: Executes shell commands and PowerShell scripts to install dependencies like the
requestslibrary, manage file permissions, and configure the local environment for PDS operations. - [PERSISTENCE]: Configures system persistence to support the cloud drive mounting feature (
mountapp) using Windows Scheduled Tasks, macOS launchd agents, and Linux systemd services. - [PRIVILEGE_ESCALATION]: Employs
sudoand administrative execution levels (RunAsin PowerShell) to move binaries to system paths and install required drivers and packages. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-uploaded PDS files for analysis and summarization, which could contain instructions intended to influence the agent.
- Ingestion points: File content processed via the
aliyun pds analyzecommand inreferences/multianalysis-file.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore content inside the PDS files.
- Capability inventory: The skill has extensive file system, network, and system configuration capabilities through the CLI.
- Sanitization: Relies on the server-side processing of the Alibaba Cloud PDS multianalysis service.
Audit Metadata