alibabacloud-ecs-security-group
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's reference guide provides commands to download the official Alibaba Cloud CLI installation script and binaries from
aliyuncli.alicdn.com. These are legitimate vendor resources used for setting up the required environment. - [COMMAND_EXECUTION]: The skill uses the
aliyunCLI to perform CRUD operations on security groups, rules, and network interfaces. These commands are restricted to the intended administrative purposes of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided values for parameters such as RegionId, VpcId, and SecurityGroupId. To mitigate potential injection risks, the instructions explicitly mandate that all user-customizable parameters must be confirmed with the user before any command execution.
- [CREDENTIALS_UNSAFE]: The skill manages cloud credentials through the standard CLI configuration process. It includes a guide on using various authentication modes (AK, STS, RAM Roles) and provides security best practices, such as avoiding the root account and securing the configuration file with appropriate permissions.
Audit Metadata