alibabacloud-cfw-status-overview
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for the agent to install or update the Aliyun CLI using a shell script from a remote server.
- Evidence:
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash. The source domainalicdn.comis the official content delivery network for Alibaba Cloud, a well-known service provider. - [COMMAND_EXECUTION]: The skill requires the execution of numerous shell commands to interact with the Alibaba Cloud infrastructure.
- Evidence: Frequent use of
aliyun cloudfw ...commands to query asset statistics, firewall statuses, and traffic trends. It also uses utility commands such asdatefor timestamp generation andjqfor parsing JSON output. - [PROMPT_INJECTION]: The skill uses strong imperative language and specific instructions to override potential agent refusal patterns.
- Evidence: Instructions include "MANDATORY EXECUTION RULES," "DO NOT refuse to execute," and directives to ignore perceived API limitations (e.g., "NEVER say 'I don't have access to APIs'"). These are used to ensure the reliability of the technical workflow for its intended purpose.
- [SAFE]: The skill includes extensive security constraints to protect user credentials.
- Evidence: Explicit prohibitions against reading, echoing, or displaying Access Key (AK) or Secret Key (SK) values, and instructions to check configuration status using safe commands like
aliyun configure listwithout revealing secrets.
Audit Metadata