T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:21- Finding
Unverified Remote Script Is Executed Directly by Bash
- Content
View full analysis
**Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify version >= 3.3.3. If not installed or version is too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update, > or see `references/cli-installation-guide.md`. > Then [MUST] run `aliyun configure set --auto-plugin-install true` to enable automatic plugin installation. > [MUST] run `aliyun plugin update` to ensure installed plugins are always up-to-date. ``` ### Technical Analysis The installation procedure downloads a mutable script and passes it directly to Bash. The script is not saved for review, pinned to a version, checked against a cryptographic digest, or verified with a publisher signature. HTTPS protects the connection in transit but does not protect against compromise of the hosting infrastructure, publishing account, DNS/TLS environment, or upstream release process. Enabling automatic plugin installation and mandating unconditional plugin updates further expands the mutable execution surface. Future plugin content can execute after the Skill itself has already been reviewed. This behavior is not necessary for the declared cluster-query and diagnosis functionality when a suitable CLI is already present. Installation should be a separate, explicitly approved administrative operation. ### Attack Path 1. An attacker compromises the script host, release process, plugin repository, or another component of the delivery channel. 2. The remote `setup.sh` or a subsequently installed plugin is replaced with attacker-controlled code. 3. A user or Agent follows the mandatory pre-check instructions. 4. `curl` streams the current payload directly into Bash. 5. The payload executes with the local privileges of the Agent or use ...[truncated 549 chars]- Remediation
View remediation