alibabacloud-polardbx-ops

Fail

Audited by Snyk on Aug 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The first two URLs are official Alibaba Cloud documentation/console pages (low risk), but https://aliyuncli.alicdn.com/setup.sh is a direct shell installer (used with curl | bash) and therefore a potentially risky executable download that should be treated with caution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The installation guide includes a runtime installation command that fetches and executes remote code via curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash (references/cli-installation-guide.md), which is a runtime external dependency that executes remote code.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 14, 2026, 03:39 AM
Issues
2
Security Audit — snyk — alibabacloud-polardbx-ops