T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:25- Finding
Unverified Remote Installation Script Is Piped Directly into Bash
- Content
View full analysis
**Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update, > or see `references/cli-installation-guide.md` for installation instructions. > Then [MUST] run `aliyun configure set --auto-plugin-install true` to enable automatic plugin installation. ``` ### Technical Analysis The command streams the current response from an external URL directly into Bash. The downloaded content is not inspected, pinned to a version, authenticated with a package signature, or checked against a published cryptographic digest before execution. Although the hostname appears related to Alibaba Cloud, repository content alone does not establish endpoint ownership or guarantee that the response will remain unchanged. The effective executable payload can change after the Skill has been reviewed. Compromise of the publishing account, CDN, origin server, DNS resolution, TLS trust chain, or release process could therefore turn this instruction into an arbitrary-code-execution channel. The command runs with all privileges available to the invoking shell. If a user invokes the Skill from a privileged account, the remote script receives those elevated privileges. Installing a CLI is legitimate for the declared functionality, but executing a mutable response without verification is not the minimum-risk installation method. ### Attack Path 1. An attacker compromises the script publishing process, origin server, CDN, DNS path, or another component capable of controlling the HTTPS response. 2. The user invokes the Skill on a system where the Aliyun CLI is absent or below the required version. 3. The Skill instructs the user or Agent to execut ...[truncated 818 chars]- Remediation
View remediation