alibabacloud-workbench-cli
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts from Alibaba Cloud's Object Storage Service (OSS) at
workbench-cli.oss-cn-hangzhou.aliyuncs.com. These resources originate from the vendor's official infrastructure and are used for the primary purpose of the skill. - [REMOTE_CODE_EXECUTION]: Installation instructions include piping remote shell scripts (
install.shandinstall.ps1) directly to bash or PowerShell. As these scripts are hosted on official Alibaba Cloud domains and authored by the vendor, this behavior is documented as a standard installation procedure for the specified tooling. - [COMMAND_EXECUTION]: The skill leverages the
bashtool to executeworkbenchCLI commands for instance management, file transfers, and credential configuration. It includes specific safety instructions requiring the agent to seek user confirmation before executing potentially destructive commands likermorshutdown. - [CREDENTIALS_UNSAFE]: The skill provides instructions for managing credentials in
~/.workbench/config.jsonusing placeholders (e.g.,<AccessKeyID>). It correctly advises setting secure file permissions (chmod 600) for the configuration file.
Audit Metadata