aliyun-sls-openclaw-integration

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill makes extensive use of sudo to perform system administration tasks.
  • Executes package manager commands (apt-get, dnf, yum, zypper) with root privileges to install the aliyun-cli tool.
  • Manages system services using /etc/init.d/loongcollectord and /etc/init.d/ilogtaild with sudo to check status and start the agents.
  • Performs file system operations in restricted directories, including creating /etc/ilogtail/ and modifying /etc/ilogtail/user_defined_id and UID marker files.
  • [REMOTE_CODE_EXECUTION]: The skill downloads and executes a shell script (loongcollector.sh) from Alibaba Cloud's Object Storage Service (OSS) infrastructure. The script is used to install the observability collector on the Linux host.
  • [COMMAND_EXECUTION]: Contains complex bash scripts that automate the environment setup. This includes resolving project regions via the CLI, generating random identifiers, and using sed to dynamically populate JSON configuration templates for SLS dashboards and collectors.
  • [EXTERNAL_DOWNLOADS]: Fetches the aliyun-cli binary using standard system package repositories. It also fetches the LoongCollector installation script from an external URL (aliyuncs.com).
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion pipeline that reads session logs from user home directories, which represents a surface for indirect instruction processing.
  • Ingestion points: Configured to monitor .jsonl files within ~/.openclaw/agents/main/sessions/ in references/collector-config.json.
  • Boundary markers: The configuration does not specify explicit delimiters or instruction-bypass warnings for the ingested log content.
  • Capability inventory: The environment provides access to significant capabilities, including sudo command execution and authenticated network access to Alibaba Cloud SLS APIs.
  • Sanitization: Log data is processed using native JSON and timestamp processors as defined in the collector-config.json template without specialized sanitization for nested instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:17 AM