Skills
Navigate
skills/aliyun/alibabacloud-aiops-skills/alibabacloud-cas-ssl-cert-purchase/Gen Agent Trust Hub

alibabacloud-cas-ssl-cert-purchase

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions in references/cli-installation-guide.md to download and install the official Aliyun CLI using a shell script hosted on aliyuncli.alicdn.com. This domain is an official Alibaba Cloud CDN, making the remote resource trusted.
  • [COMMAND_EXECUTION]: The skill executes cloud management commands via the aliyun CLI and a local helper script scripts/bss-purchase.sh. The script is written with security considerations, such as using set -euo pipefail and proper variable quoting to prevent command injection.
  • [PROMPT_INJECTION]: The SKILL.md contains robust defensive instructions, including mandatory 'Confirmation Gates' and 'Intent Clarification' steps that force the agent to stop and wait for explicit user approval before performing sensitive or financial operations.
  • [CREDENTIALS_UNSAFE]: The skill enforces safe credential management by explicitly forbidding the reading, printing, or asking for AccessKey/SecretKey values, directing users to configure their environment securely outside the session.
  • [DATA_EXFILTRATION]: All network operations are directed towards official Alibaba Cloud API endpoints or trusted vendor CDNs. No suspicious data exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 07:54 AM
Security Audit — agent-trust-hub — alibabacloud-cas-ssl-cert-purchase