alibabacloud-sas-install-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit runtime commands that download-and-execute remote scripts required for installation, for example "curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash" (Aliyun CLI installer) and "wget https://update2.aegis.aliyun.com/download/install/2.0/linux/AliAqsInstall.sh && chmod +x AliAqsInstall.sh && ./AliAqsInstall.sh -k=" (Security Center agent installer), which fetch remote code that is executed as part of the skill flow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly performs many write operations that modify system and remote-instance state (install/uninstall agents, run remote commands via aliyun ecs run-command/invoke-command, change authorization and module switches) and even instructs running a curl|bash installer locally — actions that can alter system files or execute privileged operations, so it pushes the agent to change the machine state.