alibabacloud-cdn-traffic-anomaly
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the official
aliyunCLI using thesubprocess.runmethod within its Python scripts. It correctly passes arguments as a list and avoids the use of the system shell (shell=False), which effectively mitigates potential command injection risks from user-supplied domain names. - [INDIRECT_PROMPT_INJECTION]: The skill performs forensics by ingesting and parsing CDN offline access logs.
- Ingestion points:
scripts/cdn_traffic_analysis.pydownloads gzip log files from the CDN service and iterates through their contents. - Boundary markers: The skill uses a structured report template (
references/report-template.md) to separate analytical findings from the agent's response context. - Capability inventory: The scripts are limited to reading data via the
aliyunCLI and performing local file operations for log caching. - Sanitization: Logs are processed using strict regular expressions (
LOG_PATTERN) to extract specific fields, ensuring that arbitrary content within the logs is not interpreted as instructions by the agent.
Audit Metadata