alibabacloud-cfw-nat-firewall-protect

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official Alibaba Cloud CLI installation script via curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash. This operation targets the vendor's official content delivery network and is a documented method for setting up the required environment.
  • [COMMAND_EXECUTION]: The skill implements management logic through several bash scripts (nat-fw-lifecycle.sh, nat-fw-switch.sh) that execute aliyun CLI commands to interact with Alibaba Cloud Firewall and VPC services.
  • [EXTERNAL_DOWNLOADS]: The validate-cli.sh script and SKILL.md reference external resources from aliyuncli.alicdn.com for tool installation and updates, which are standard operations for maintaining official cloud management utilities.
  • [DATA_EXPOSURE]: The skill reads local CLI profile names and regions to verify the execution environment but does not access or exfiltrate sensitive credential values such as AccessKey secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 06:51 AM
Security Audit — agent-trust-hub — alibabacloud-cfw-nat-firewall-protect