The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill's instructions extensively use sudo for commands that typically do not require administrative privileges, such as s deploy, s invoke, and s init. Running cloud orchestration tools as root unnecessarily increases the security risk to the host system if the tool or its dependencies are compromised.\n- [EXTERNAL_DOWNLOADS]: The skill directs the user to install the @serverless-devs/s package from the npm registry. This is a legitimate package provided by a well-known service (Alibaba Cloud).\n- [COMMAND_EXECUTION]: The skill provides numerous shell command snippets for installing software, configuring Alibaba Cloud credentials, and managing serverless function lifecycles (initialization, deployment, invocation, and removal).\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that involves the agent interacting with project files like s.yaml and function code in code/index.py (SKILL.md). These files represent ingestion points for potentially untrusted data. There are no boundary markers or explicit sanitization steps mentioned in the instructions to handle malicious content within these files. Given the skill's capabilities to execute shell commands and perform cloud deployments (SKILL.md), this creates a surface for indirect prompt injection.

aliyun-fc-serverless-devs