aliyun-swas-manage

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Alibaba Cloud 'RunCommand' API to execute shell scripts on remote server instances. This is implemented in scripts/fix_ssh_access.py to automate server configuration and scripts/get_ssh_port.py to query instance settings.
  • [PRIVILEGE_ESCALATION]: scripts/fix_ssh_access.py performs administrative changes on remote systems, specifically modifying the /etc/ssh/sshd_config file to enable 'PermitRootLogin' and 'PubkeyAuthentication'.
  • [PERSISTENCE]: The skill provides functionality in scripts/fix_ssh_access.py to append an SSH public key to the authorized_keys file on remote instances, establishing a persistent method for remote access.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from Alibaba Cloud APIs, such as instance metadata and status information, which is then used as input for subsequent management operations.
  • Ingestion points: Instance and region data queried from Alibaba Cloud APIs in scripts/list_instances_all_regions.py and other inventory scripts.
  • Boundary markers: The skill does not explicitly define delimiters for data received from cloud APIs.
  • Capability inventory: The skill has high capabilities including remote shell execution via Cloud Assistant, firewall management, and systemd service control.
  • Sanitization: The skill relies on the structure provided by the official Alibaba Cloud Python SDK for data handling.
  • [EXTERNAL_DOWNLOADS]: The skill documentation and setup instructions involve installing official Alibaba Cloud SDK packages (alibabacloud_swas_open20200601, alibabacloud_tea_openapi, alibabacloud_credentials) from the Python Package Index (PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:17 AM