alicloud-observability-openclaw-sls-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill downloads and executes a remote installer at runtime from https://aliyun-observability-release-${REGION_ID}.oss-${REGION_ID}.aliyuncs.com/loongcollector/linux64/latest/loongcollector.sh (wget, chmod +x, ./loongcollector.sh), which fetches and runs remote code as a required installation step.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly requires and uses sudo to install system packages, create and modify files under /etc, and install/start a system service (LoongCollector), which directly changes the host system state and requests elevated privileges.