aliyun-swas-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Alibaba Cloud 'RunCommand' API to execute shell scripts on remote server instances. This is implemented in
scripts/fix_ssh_access.pyto automate server configuration andscripts/get_ssh_port.pyto query instance settings. - [PRIVILEGE_ESCALATION]:
scripts/fix_ssh_access.pyperforms administrative changes on remote systems, specifically modifying the/etc/ssh/sshd_configfile to enable 'PermitRootLogin' and 'PubkeyAuthentication'. - [PERSISTENCE]: The skill provides functionality in
scripts/fix_ssh_access.pyto append an SSH public key to theauthorized_keysfile on remote instances, establishing a persistent method for remote access. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from Alibaba Cloud APIs, such as instance metadata and status information, which is then used as input for subsequent management operations.
- Ingestion points: Instance and region data queried from Alibaba Cloud APIs in
scripts/list_instances_all_regions.pyand other inventory scripts. - Boundary markers: The skill does not explicitly define delimiters for data received from cloud APIs.
- Capability inventory: The skill has high capabilities including remote shell execution via Cloud Assistant, firewall management, and systemd service control.
- Sanitization: The skill relies on the structure provided by the official Alibaba Cloud Python SDK for data handling.
- [EXTERNAL_DOWNLOADS]: The skill documentation and setup instructions involve installing official Alibaba Cloud SDK packages (
alibabacloud_swas_open20200601,alibabacloud_tea_openapi,alibabacloud_credentials) from the Python Package Index (PyPI).
Audit Metadata