aliyun-sls-openclaw-integration
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the LoongCollector installation script from Alibaba Cloud's official Object Storage Service (OSS) at aliyuncs.com.\n- [REMOTE_CODE_EXECUTION]: Executes the downloaded loongcollector.sh script with elevated privileges to install the observability agent on the host system.\n- [COMMAND_EXECUTION]: Extensively uses sudo to manage system-level configurations, including installing packages via system managers (apt-get, yum, dnf, zypper), controlling services, and creating configuration files in protected directories like /etc/ilogtail/.\n- [CREDENTIALS_UNSAFE]: Mandates the use of environment variables for ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET to authenticate CLI operations.
Audit Metadata