T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:34- Finding
Unverified Remote Installation Script Is Executed Directly by Bash
- Content
View full analysis
**Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see `references/cli-installation-guide.md` for installation instructions. ``` ### Technical Analysis The installation command sends content retrieved from an external URL directly to Bash. It provides no opportunity to inspect the script and performs no checksum, digital-signature, or pinned-version verification. Although the domain appears related to Alibaba Cloud, relying on HTTPS and a recognizable hostname does not establish the integrity of a mutable remote script. The effective code executed by the Skill can change after the reviewed package has been published. Compromise of the hosting infrastructure, account, release pipeline, DNS resolution, TLS trust path, or remote script can therefore convert this prerequisite into arbitrary code execution. The command executes with the privileges of the user running the Skill. If the Skill is run by a privileged account, the remote payload receives those elevated privileges. ### Attack Path 1. An attacker compromises the remote script, its publication pipeline, or another component in its delivery path. 2. A user loads the Skill on a host where Aliyun CLI is absent or outdated. 3. The Skill instructs the user or Agent to execute the `curl | bash` command. 4. `curl` retrieves the attacker-controlled content. 5. Bash executes the content immediately without integrity validation or review. 6. The payload can access the user's files, credentials, cloud configuration, and network privileges and may attempt further system compromise. ### Impact Assessment Successful exploitation permits arbitrary command executio ...[truncated 519 chars]- Remediation
View remediation