T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:47- Finding
Unverified Remote Installation Script Executed Directly by Bash
- Content
View full analysis
**Pre-check: Aliyun CLI >= 3.3.3 required** > Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update, > or see [references/cli-installation-guide.md](references/cli-installation-guide.md) for installation instructions. ``` ### Technical Analysis The command downloads a mutable shell script from an external URL and sends its contents directly to Bash. There is no intermediate inspection, version pinning, cryptographic checksum verification, or signature validation. Although HTTPS provides transport authentication and integrity under normal conditions, it does not make the remote payload immutable or protect against compromise of the publisher, CDN, domain, DNS infrastructure, signing environment, or release process. The code ultimately executed by the Skill can therefore change after the Skill package has been reviewed. Installing Aliyun CLI may be necessary for the declared workflow, but direct remote script execution is not the minimum-risk installation method required to provide SASE network diagnosis. ### Attack Path 1. An attacker compromises the remote server, CDN, DNS path, release pipeline, or the content served at `https://aliyuncli.alicdn.com/setup.sh`. 2. The attacker replaces or modifies the installation script with a malicious payload. 3. A user or Agent follows the mandatory installation guidance. 4. `curl` retrieves the attacker-controlled response and pipes it directly into Bash. 5. The payload executes with the privileges of the user running the Skill. 6. The payload can access user-readable files, modify local configuration, install additional programs, or target Alibaba Cloud credentials available to that user. ### Impact Assessm ...[truncated 653 chars]- Remediation
View remediation