T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:23- Finding
Unverified Remote Installation Script Executed Directly by Bash
- Content
View full analysis
Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update, ``` ### Technical Analysis The installation command sends a mutable HTTPS response directly to Bash. There is no explicit version pinning, checksum validation, signature verification, local inspection step, or approval of the downloaded content. Although the hostname appears associated with Alibaba Cloud, its presence alone does not establish the integrity of every future response. The effective code executed by the Skill can change after the Skill itself has been reviewed. Compromise of the remote hosting infrastructure, CDN distribution path, release process, or applicable TLS trust could therefore turn this command into an arbitrary code-execution channel. Direct remote script execution is not necessary for the declared PAI workspace-management functionality. The project already documents package-manager and separately downloaded binary alternatives. ### Attack Path 1. An attacker compromises or gains control over the remote script, its distribution infrastructure, or an upstream release process. 2. A user or Agent follows the mandatory-looking installation instruction. 3. `curl` downloads the attacker-controlled response. 4. The pipe passes the response directly to Bash without any integrity check or review. 5. The payload executes with the current user's privileges and can access the user's files, environment, CLI configuration, and available cloud credentials. ### Impact Assessment Successful exploitation provides arbitrary local command execution with the privileges of the user running the installation. If run from a credentialed automation environment, the payload may also gain access to Ali ...[truncated 261 chars]- Remediation
View remediation