alibabacloud-cdn-traffic-anomaly
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements strict read-only enforcement, explicitly prohibiting mutating API calls such as StopCdnDomain or any configuration modifications.
- [SAFE]: Credential handling follows security best practices; the skill relies on the aliyun CLI's default credential chain and prohibits the ingestion or printing of access keys.
- [SAFE]: External network operations are limited to downloading CDN offline logs from URLs generated by the official Alibaba Cloud API. These downloads are performed using standard libraries and target vendor-controlled infrastructure.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation patterns were detected. The use of subprocess.run is limited to executing the aliyun CLI with static argument lists.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from CDN access logs which contain attacker-controlled headers. This represents a theoretical injection surface; however, the risk is assessed as safe because the scripts perform statistical summarization rather than direct reflection of raw data, and the agent's environment is restricted to read-only diagnostic tasks.
- Ingestion points: scripts/cdn_traffic_analysis.py processes downloaded CDN access logs.
- Boundary markers: Analysis results are output using structured report templates.
- Capability inventory: The skill uses the aliyun CLI for read-only data retrieval via subprocess calls.
- Sanitization: External log data is parsed via regular expressions and transformed into summarized frequency statistics.
Audit Metadata