alibabacloud-sas-log-to-oss
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions in
SKILL.mdandreferences/cli-installation-guide.mdrecommend installing the Aliyun CLI using a remote script execution pattern:bash -c "$(curl -fsSL ... https://aliyuncli.alicdn.com/setup.sh)". This script originates from the official Alibaba Cloud CDN. - [COMMAND_EXECUTION]: Manual installation steps for the CLI tool include the use of
sudoto move binary files to system paths (e.g.,/usr/local/bin/). - [EXTERNAL_DOWNLOADS]: The skill requires the installation of official Alibaba Cloud Python SDKs (
alibabacloud_sls20201230andalibabacloud_credentials) as listed inscripts/requirements.txt. - [SAFE]: The skill implements strong security guidelines regarding credential management. It explicitly forbids the agent from printing, echoing, or asking the user for AccessKey ID or Secret values, instructing instead that they be managed via environment variables or local configuration files.
Audit Metadata