alibabacloud-tech-solution-animation-creation-auto-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONOBFUSCATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The scripts/attach-policies.sh script automatically attempts to attach high-privilege system policies (AliyunOSSFullAccess and AliyunFCFullAccess) to the current RAM user using the Aliyun CLI. This bypasses manual permission review during the automation process.\n- [OBFUSCATION]: The scripts/create-custom-domain.sh script includes a base64-encoded ZIP file containing source code for a domain verification function. This prevents direct inspection of the function's logic without decoding the payload.\n- [DYNAMIC_EXECUTION]: The skill programmatically creates and deploys a function to Alibaba Cloud Function Compute using the base64-encoded zip payload found in scripts/create-custom-domain.sh. This code is executed on the cloud platform to respond to domain ownership challenges.\n- [COMMAND_EXECUTION]: The automation workflow is implemented as a series of shell scripts that execute numerous Aliyun CLI commands, involving account identity retrieval, resource creation, and environmental configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:07 AM