alibabacloud-sas-log-to-oss

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructions in SKILL.md and references/cli-installation-guide.md recommend installing the Aliyun CLI using a remote script execution pattern: bash -c "$(curl -fsSL ... https://aliyuncli.alicdn.com/setup.sh)". This script originates from the official Alibaba Cloud CDN.
  • [COMMAND_EXECUTION]: Manual installation steps for the CLI tool include the use of sudo to move binary files to system paths (e.g., /usr/local/bin/).
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of official Alibaba Cloud Python SDKs (alibabacloud_sls20201230 and alibabacloud_credentials) as listed in scripts/requirements.txt.
  • [SAFE]: The skill implements strong security guidelines regarding credential management. It explicitly forbids the agent from printing, echoing, or asking the user for AccessKey ID or Secret values, instructing instead that they be managed via environment variables or local configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:38 AM
Security Audit — agent-trust-hub — alibabacloud-sas-log-to-oss