alicloud-compute-fc-serverless-devs
Warn
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute numerous commands using
sudo, including global package installation (npm install -g), tool configuration, project initialization, and function deployment. Executing deployment tools with root privileges unnecessarily increases the potential impact of vulnerabilities in the tool or its dependencies.- [EXTERNAL_DOWNLOADS]: The skill installs the@serverless-devs/spackage from the public npm registry. This is the official command-line tool for Alibaba Cloud Function Compute.- [CREDENTIALS_UNSAFE]: The skill guides users through the configuration of Alibaba Cloud credentials, including AccountID, AccessKeyID, and AccessKeySecret. The provided examples include passing these secrets as command-line arguments or storing them in environment variables, which can lead to exposure in terminal history, process monitoring tools, or local configuration files.
Audit Metadata