alibabacloud-sms-send-short-message

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL requires installing the aliyun CLI at runtime via commands that fetch and execute remote code (curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash and wget https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz then extract), so these external URLs directly cause remote code execution during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the skill explicitly instructs running privileged installation commands (e.g. "curl ... | bash" and an explicit "sudo mv aliyun /usr/local/bin/"), which require sudo and modify system files on the host.