alibabacloud-sls-cli-guidance

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Aliyun CLI installation script and binary packages from the vendor's domain aliyuncli.alicdn.com.
  • [REMOTE_CODE_EXECUTION]: Provides instructions to execute a remote installation script via curl | bash and installs functional plugins using the aliyun plugin install command.
  • [COMMAND_EXECUTION]: Extensively uses the aliyun CLI to interact with Alibaba Cloud services, performing operations such as project creation, logstore management, and log ingestion.
  • [PRIVILEGE_ESCALATION]: Includes commands that use sudo for system-wide installation and chmod to secure sensitive configuration files by restricting access permissions.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where user-provided data (e.g., project names, log content) is interpolated into shell commands executed via the CLI.
  • Ingestion points: Commands such as aliyun sls create-project --project-name <name> and aliyun sls put-json-logs --logs <json> in SKILL.md, project.md, and put-json-logs.md.
  • Boundary markers: Includes rules requiring --cli-dry-run for destructive operations and explicit user approval before execution.
  • Capability inventory: Spawns subprocesses for the aliyun CLI and potentially other shell utilities (cat, npx).
  • Sanitization: No explicit sanitization of user-provided strings is mentioned before they are passed to the CLI commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:34 AM