T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:27- Finding
Unverified Remote Installation Script Executed Directly by Bash
- Content
View full analysis
Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see `references/cli-installation-guide.md` for installation instructions. ``` ### Technical Analysis The Skill instructs the agent to retrieve a mutable shell script from an external URL and pipe it directly into Bash. The downloaded content is not pinned to a specific version, saved for review, or validated using a cryptographic checksum or signature before execution. HTTPS provides transport protection but does not establish that the script remains unchanged over time. Compromise of the hosting account, CDN, DNS infrastructure, certificate trust chain, or upstream release process could cause arbitrary attacker-controlled commands to be returned. Directly piping the response to Bash also removes the opportunity to inspect the effective payload before it executes. Installing the CLI is ancillary setup and does not require unrestricted execution of mutable remote shell content. ### Attack Path 1. The Skill is invoked on a host where Aliyun CLI is absent or older than version 3.3.3. 2. The agent follows the installation instruction. 3. An attacker compromises the referenced distribution endpoint or its release pipeline. 4. The endpoint returns a modified `setup.sh`. 5. `curl` passes the response directly to Bash without integrity verification. 6. The malicious commands execute with the privileges of the agent or user running the Skill. 7. The payload can access local files, modify user configuration, steal credentials, or install additional components. ### Impact Assessment Successful exploitation provides arbitrary command execution under the current local account. The effective scope includes all files and ...[truncated 393 chars]- Remediation
View remediation