alibabacloud-sls-cli-guidance
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Aliyun CLI installation script and binary packages from the vendor's domain
aliyuncli.alicdn.com. - [REMOTE_CODE_EXECUTION]: Provides instructions to execute a remote installation script via
curl | bashand installs functional plugins using thealiyun plugin installcommand. - [COMMAND_EXECUTION]: Extensively uses the
aliyunCLI to interact with Alibaba Cloud services, performing operations such as project creation, logstore management, and log ingestion. - [PRIVILEGE_ESCALATION]: Includes commands that use
sudofor system-wide installation andchmodto secure sensitive configuration files by restricting access permissions. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where user-provided data (e.g., project names, log content) is interpolated into shell commands executed via the CLI.
- Ingestion points: Commands such as
aliyun sls create-project --project-name <name>andaliyun sls put-json-logs --logs <json>inSKILL.md,project.md, andput-json-logs.md. - Boundary markers: Includes rules requiring
--cli-dry-runfor destructive operations and explicit user approval before execution. - Capability inventory: Spawns subprocesses for the
aliyunCLI and potentially other shell utilities (cat,npx). - Sanitization: No explicit sanitization of user-provided strings is mentioned before they are passed to the CLI commands.
Audit Metadata