skills/aliyun/alibabacloud-aiops-skills/alibabacloud-tech-solution-animation-creation-auto-deploy/Gen Agent Trust Hub
alibabacloud-tech-solution-animation-creation-auto-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONOBFUSCATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
scripts/attach-policies.shscript automatically attempts to attach high-privilege system policies (AliyunOSSFullAccessandAliyunFCFullAccess) to the current RAM user using the Aliyun CLI. This bypasses manual permission review during the automation process.\n- [OBFUSCATION]: Thescripts/create-custom-domain.shscript includes a base64-encoded ZIP file containing source code for a domain verification function. This prevents direct inspection of the function's logic without decoding the payload.\n- [DYNAMIC_EXECUTION]: The skill programmatically creates and deploys a function to Alibaba Cloud Function Compute using the base64-encoded zip payload found inscripts/create-custom-domain.sh. This code is executed on the cloud platform to respond to domain ownership challenges.\n- [COMMAND_EXECUTION]: The automation workflow is implemented as a series of shell scripts that execute numerous Aliyun CLI commands, involving account identity retrieval, resource creation, and environmental configuration.
Audit Metadata