alibabacloud-sysom-diagnosis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
sysom-osopsCLI installation script from Alibaba Cloud's official Object Storage Service (OSS) domain (aliyuncs.com). - [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the diagnostic tool using a shell script (
install.sh) piped tobashorsudo bash. This script is hosted on the vendor's own production infrastructure and is required for the primary functionality of the skill. - [COMMAND_EXECUTION]: The skill's core function is to execute various
sysom-osopssubcommands (e.g.,memory classify,java analyze,io iodiagnose) to retrieve and interpret system performance data from Linux servers. - [CREDENTIALS_UNSAFE]: The skill includes explicit security instructions for the agent to never print, echo, or ask for AccessKey ID or AccessKey Secret values. It directs users to secure credential configuration methods outside the agent session and provides a least-privilege RAM policy for the required operations.
- [PERSISTENCE]: The installation process suggests adding the CLI binary path to shell profile files (e.g.,
~/.bashrcor~/.zshrc) to ensure the tool is available in future sessions, which is standard behavior for CLI tool installation. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from system diagnostic tools. While it ingests data from external Linux systems, the data consists of system metrics and diagnostic logs. The risk is minimized by parsing structured JSON and focusing on technical performance analysis.
Audit Metadata