Alibabacloud Aes Sysom Pai Diagnosis

• Outcome: Review
• Latest audit: Jun 2, 2026, 10:24 AM
• Version:
  0.0.1

Overview

The skill appears to be a legitimate Alibaba Cloud diagnostic workflow, but it uses sensitive cloud credentials and makes persistent Alibaba CLI configuration/plugin changes that are not fully reversible or clearly scoped.

Install only if you are comfortable using Alibaba Cloud credentials with SysOM/PAI diagnostic permissions. Prefer a least-privilege RAM role, review the `initial-sysom` authorization effect, and be prepared to manually restore Alibaba CLI settings such as auto-plugin-install, user-agent, and plugin versions after use. Do not paste `aliyun configure list` output into chats or tickets without redacting account identifiers, access keys, tokens, and profile details.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Intent-Code Divergence

Medium

• Confidence: 89% confidence
• Finding: The skill claims the workflow is read-only and 'no cleanup is needed,' but earlier steps perform persistent client-side configuration changes such as enabling AI mode, setting a persistent user-agent, auto-plugin install, and updating plugins. In a shared or production shell environment, these side effects can silently alter later CLI behavior, cause unintended telemetry/user-agent persistence, and weaken change-control expectations.

Missing User Warnings

Low

• Confidence: 90% confidence
• Finding: The document instructs operators to run `aliyun configure list` to verify credentials, but it does not warn that this command may expose account identity details or configured authentication information in terminal output, logs, screenshots, or shared transcripts. In a troubleshooting skill that may be used interactively with agents, this increases the risk of unnecessary credential or identity disclosure during verification.

VirusTotal

61/61 vendors flagged this skill as clean.