The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute a setup script (https://aliyuncli.alicdn.com/setup.sh | bash) for the official Alibaba Cloud CLI tool. This resource originates from the vendor's official content delivery network.
[PRIVILEGE_ESCALATION]: The provided installation guide (references/cli-installation-guide.md) includes instructions for moving binary files to system paths using sudo. This is a standard administrative requirement for installing system-wide CLI tools on Unix-like systems.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from security alerts (e.g., alert names, event types, and associated metadata) which could theoretically contain malicious instructions.
Ingestion points: Data enters the context via the DescribeSuspEvents API call in SKILL.md and references/related-apis.md.
Boundary markers: The skill uses structured display formats and specific JSON templates for tool output, which helps delimit data from instructions.
Capability inventory: The skill has capabilities to modify cloud resources, including blocking IPs and quarantining files via aliyun sas HandleSecurityEvents.
Sanitization: The skill enforces strict parameter formatting (JSON) and requires explicit human confirmation before executing any handling operations, significantly mitigating the risk of autonomous obedience to injected instructions.
[COMMAND_EXECUTION]: The skill relies on the execution of shell commands through the aliyun CLI to interact with Alibaba Cloud services. All commands are documented for their intended purpose of security alert management.

alibabacloud-sas-alert-handler