alibabacloud-cas-ssl-common-tools
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides detailed instructions for installing and updating the Alibaba Cloud CLI tool. It references official vendor sources including 'aliyuncli.alicdn.com' and the 'aliyun' GitHub organization. The installation guide explicitly warns against unsafe practices like piping remote content directly into a shell, recommending local review of setup scripts instead.
- [COMMAND_EXECUTION]: The skill automates certificate management by executing the
aliyunCLI,openssl, andkeytool. It includes local shell scripts ('scripts/split-chain.sh', 'scripts/convert-format.sh', 'scripts/modulus-check.sh') to perform deterministic operations such as format conversion and modulus matching. These scripts include safety checks, such as verifying output directory paths before file operations. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill strictly manages private keys and credentials. It mandates the use of temporary directories with restricted permissions ('chmod 700') for certificate processing and ensures private keys are set to 'chmod 600'. It explicitly forbids the agent from printing or requesting sensitive credentials like Access Keys or Secret Keys in the conversation.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected. The skill's behavior is consistent with its stated purpose of providing an SSL certificate toolkit for Alibaba Cloud.
Audit Metadata