skills/aliyun/alibabacloud-aiops-skills/alibabacloud-cfw-vpc-firewall-cen-basic-manage/Gen Agent Trust Hub
alibabacloud-cfw-vpc-firewall-cen-basic-manage
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Alibaba Cloud CLI installation script from a vendor-controlled domain (aliyuncli.alicdn.com). As the skill is authored by the vendor ('aliyun') and points to official infrastructure, this is determined to be a safe and standard deployment procedure.
- [COMMAND_EXECUTION]: The script
scripts/cfw_cen_basic.pyexecutesaliyunCLI tools using thesubprocessmodule. All user-supplied inputs, including Region IDs, VPC IDs, and CIDR blocks, are strictly validated against regular expressions before execution, effectively mitigating command injection risks. - [SAFE]: The skill demonstrates high security maturity by explicitly requiring manual confirmation for destructive operations, using non-sensitive methods to verify authentication status, and documenting clear resource boundaries. No malicious patterns, obfuscation, or unauthorized data access were detected.
Audit Metadata