The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and binary packages from aliyuncli.alicdn.com, which is an official vendor-owned content delivery network for Alibaba Cloud tools.
[REMOTE_CODE_EXECUTION]: The skill instructs the agent to execute a vendor-provided installation script via bash command substitution. While this pattern was flagged by scanners, the source is a trusted vendor domain (aliyuncli.alicdn.com) as defined in the vendor context, making this a legitimate installation procedure.
[COMMAND_EXECUTION]: The skill uses local commands such as command -v, openssl, and python3 for functional requirements like environment verification and generating session identifiers for observability.
[PRIVILEGE_ESCALATION]: The skill employs sudo for administrative tasks, including running the macOS installer package and moving the aliyun binary to /usr/local/bin/. these operations are standard for a system-wide CLI utility installation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input via the --query parameter of the aliyun rdsai chat-messages command (located in SKILL.md). The capability inventory includes RDS management, plugin installation, and CLI configuration. While specific boundary markers for the query content are not explicitly defined in the shell command, the skill mitigates risk by mandating that the agent provide explicit warnings and assessment recommendations to users before executing AI-generated SQL or operational steps in production environments.

alibabacloud-rds-copilot