Alibabacloud Cli Guidance
Security checks across malware telemetry and agentic risk
Overview
The skill's files and runtime instructions align with its stated purpose (guiding use of the Aliyun CLI); it asks users to configure credentials and optionally run the official installer, which is expected for this functionality.
This skill appears coherent and appropriate for teaching or automating the Alibaba Cloud CLI. Before running anything it suggests: 1) Inspect the install script instead of blindly piping curl to bash (or prefer your OS package manager/homebrew and verify checksums). 2) Use least-privilege RAM credentials or OAuth where possible and avoid using root account keys. 3) Be careful with --log-level debug and --body-file/--header flags because they can expose or transmit sensitive data; make sure you aren’t unintentionally sending local files or secrets. 4) If you use AI-mode (user-agent token), remember to disable it and unset exported env vars when done to avoid persistent attribution or accidental leakage. If you want extra assurance, ask the skill author for a checksum or signed release URL for installers or prefer installing from your distro/package manager.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.