alibabacloud-cfw-exposure-detection
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill and its references provide instructions to download the Aliyun CLI and its setup scripts from
https://aliyuncli.alicdn.com. These are official vendor resources used for tool installation and updates. - [REMOTE_CODE_EXECUTION]: The skill includes instructions to install or update the Aliyun CLI using
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash. This is a standard installation method for the vendor's tooling and targets the vendor's official CDN. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from Alibaba Cloud Firewall APIs to generate security assessments and remediation reports, creating a potential surface for indirect injection if API responses were compromised.
- Ingestion points: Data is ingested via the
aliyun cloudfwCLI plugin from multiple API endpoints such asDescribeInternetOpenIpandDescribeRiskEventGroup(documented inSKILL.md). - Boundary markers: No specific delimiters are used when interpolating API data into the final report structure.
- Capability inventory: The skill uses
aliyunCLI commands for data retrieval and environment variable configuration (export) for timeouts (documented inSKILL.md). - Sanitization: The skill includes explicit "Output Desensitization" rules in
SKILL.mdto mask IP addresses and instance IDs before presenting them to the user.
Audit Metadata