alibabacloud-elasticsearch-instance-manage

SUSPICIOUS. The skill's capabilities mostly match its stated purpose and use official Alibaba tooling, so it is not malware-like. The main risk is the mandatory enablement of automatic plugin installation: it downloads and runs additional executables that inherit cloud credentials, increasing supply-chain and credential-forwarding risk. Because the skill also authorizes impactful cloud actions like instance creation and restart, overall risk is medium rather than low.