alibabacloud-alb-ingress-doctor
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is a legitimate diagnostic utility developed for Alibaba Cloud (aliyun) ACK clusters. It uses local scripts to interact with the Kubernetes API and Alibaba Cloud services in a secure manner.
- [DATA_EXFILTRATION]: The skill manages sensitive data, specifically Kubernetes kubeconfigs, as part of its core functionality. These credentials are saved to local paths with appropriate file permissions (600) to prevent unauthorized access. All network operations are directed at verified vendor domains using official command-line interfaces.
- [COMMAND_EXECUTION]: Shell commands are used for cluster inspection. The skill includes robust input validation in its scripts to prevent command injection, and it uses safe data-passing techniques (such as using stdin for JSON parsing) when handling data retrieved from the cluster.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes external cluster events. However, this risk is mitigated by the use of static knowledge base matching and script-level sanitization, ensuring that external data cannot easily manipulate the agent's behavior beyond the intended diagnostic scope.
Audit Metadata