alibabacloud-ak-leak-incident-response
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the aliyun CLI and the pip package manager through the subprocess module in scripts/_cli.py. These calls are used to interact with cloud APIs and manage the requests dependency.
- [EXTERNAL_DOWNLOADS]: In scripts/_cli.py, the skill can automatically install the requests library from PyPI if the AK_LEAK_AUTO_INSTALL environment variable is set. This targets a well-known package from a trusted registry.
- [DATA_EXPOSURE]: The tool resolves Alibaba Cloud credentials from environment variables and the local configuration file ~/.aliyun/config.json for API authentication. It implements an automated masking system in scripts/_cli.py to protect AccessKey IDs and account UIDs in all outputs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from ActionTrail logs and RAM metadata. Evidence Chain: (1) Ingestion Point: ActionTrail API responses in scripts/ak_leak_investigation.py; (2) Boundary Markers: None; (3) Capability Inventory: aliyun CLI and pip execution in scripts/_cli.py; (4) Sanitization: Automatic masking of AKs and UIDs.
- [SAFE]: The skill is authored by the platform vendor aliyun and is purpose-built for security auditing. It enforces a strict read-only policy through both its instructions and its internal API dispatch logic.
Audit Metadata