T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:41- Finding
Unverified Remote Installation Script Is Executed Directly by Bash
- Content
View full analysis
**Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see [references/cli-installation-guide.md](references/cli-installation-guide.md) for installation instructions. ``` ### Technical Analysis The command pipes content downloaded from an external URL directly into Bash. The downloaded script is neither pinned to an immutable version nor verified with a cryptographic signature or published checksum before execution. Although the URL uses HTTPS and an Alibaba-associated domain, transport encryption alone does not establish that the retrieved script is immutable or safe. Compromise of the origin, CDN, DNS resolution, certificate trust chain, or release infrastructure could change the effective payload after this Skill has been reviewed. Installing the Aliyun CLI may be necessary for the declared quota-management functionality, but executing mutable network content directly is not the minimum privilege or minimum-risk installation method. ### Attack Path 1. An attacker compromises or gains control over the referenced script, its hosting infrastructure, or a relevant network trust component. 2. The remote `setup.sh` content is replaced or modified to contain attacker-controlled shell commands. 3. A user or Agent follows the Skill installation instructions. 4. `curl` retrieves the modified payload. 5. The pipe passes the payload directly to Bash without an intermediate review or integrity check. 6. The malicious commands execute with the permissions of the user running the Skill. If the remote script invokes or convinces the user to authorize privilege elevation, the impact may extend further. ### Impact Assessment ...[truncated 706 chars]- Remediation
View remediation