alibabacloud-cfw-status-overview

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for the agent to install or update the Aliyun CLI using a shell script from a remote server.
  • Evidence: curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash. The source domain alicdn.com is the official content delivery network for Alibaba Cloud, a well-known service provider.
  • [COMMAND_EXECUTION]: The skill requires the execution of numerous shell commands to interact with the Alibaba Cloud infrastructure.
  • Evidence: Frequent use of aliyun cloudfw ... commands to query asset statistics, firewall statuses, and traffic trends. It also uses utility commands such as date for timestamp generation and jq for parsing JSON output.
  • [PROMPT_INJECTION]: The skill uses strong imperative language and specific instructions to override potential agent refusal patterns.
  • Evidence: Instructions include "MANDATORY EXECUTION RULES," "DO NOT refuse to execute," and directives to ignore perceived API limitations (e.g., "NEVER say 'I don't have access to APIs'"). These are used to ensure the reliability of the technical workflow for its intended purpose.
  • [SAFE]: The skill includes extensive security constraints to protect user credentials.
  • Evidence: Explicit prohibitions against reading, echoing, or displaying Access Key (AK) or Secret Key (SK) values, and instructions to check configuration status using safe commands like aliyun configure list without revealing secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 01:01 AM
Security Audit — agent-trust-hub — alibabacloud-cfw-status-overview