T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:15- Finding
Unverified Remote Installation Script Executed Directly by Bash
- Content
View full analysis
Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to install/update, > or see `references/cli-installation-guide.md` for installation instructions. ``` ### Technical Analysis The Skill directs the Agent to retrieve a mutable remote script and immediately execute it with Bash. There is no pinned script version, checksum validation, cryptographic signature verification, local review step, or confirmation of the final resolved download location. The apparent vendor association of the domain does not provide content integrity. The effective code executed during a future invocation can differ from the code available when the Skill was audited. A compromise of the hosting service, CDN, DNS resolution, publisher account, or release process could consequently turn this installation command into arbitrary code execution. Installing a CLI dependency is related to the declared functionality, but piping a remote response directly to a shell is not necessary. The project already documents package-manager and separately downloaded binary installation alternatives. ### Attack Path 1. A user invokes the Skill on a system where Aliyun CLI is absent or older than the required version. 2. The Agent follows the pre-check instructions and runs the `curl | bash` command. 3. The remote service returns a compromised or malicious script. 4. Bash executes the response without first authenticating or inspecting it. 5. The payload executes with all privileges available to the Agent process. 6. It can access local files and configured Alibaba Cloud credentials, alter the CLI, install additional code, or manipulate later inspection results. ### Impact Assessment Successful exploitation provides arbitrary code execu ...[truncated 339 chars]- Remediation
View remediation