T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:22- Finding
Unverified Remote Installation Script Is Piped Directly into Bash
- Content
View full analysis
**IMPORTANT**: Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see [references/cli-installation-guide.md](references/cli-installation-guide.md) for installation instructions. ``` ### Technical Analysis The command downloads a mutable shell script from an external endpoint and passes its contents directly to Bash. It does not pin a script version, inspect the downloaded content, verify a cryptographic signature, or compare a checksum against a trusted value. Although `aliyuncli.alicdn.com` appears related to the expected vendor, the repository does not provide evidence sufficient to establish the integrity of every future response from that endpoint. The effective code executed by the Skill can therefore change after the Skill package has been reviewed. The behavior also exceeds the minimum privileges necessary for the declared cloud-provisioning workflow. Installing the CLI may be a prerequisite, but immediate execution of an unverified response is not necessary; a package manager or verified, version-pinned artifact would provide safer alternatives. ### Attack Path 1. The user invokes the Skill on a system where Aliyun CLI is absent or older than version 3.3.3. 2. The Skill directs the Agent or user to run the installation pipeline. 3. An attacker compromises the origin, CDN account, DNS path, TLS termination environment, or vendor release process. 4. The endpoint returns an attacker-controlled shell script. 5. `curl` streams the response directly into Bash without an integrity checkpoint. 6. The payload executes with the privileges of the Agent or user running the command. 7. The payload can access files and credentials available to that account or ins ...[truncated 677 chars]- Remediation
View remediation