skills/aliyun/alibabacloud-aiops-skills/alibabacloud-cloud-native-internet-diagnostics/Gen Agent Trust Hub
alibabacloud-cloud-native-internet-diagnostics
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The diagnostic logic is performed by executing the official
aliyuncommand-line interface through Python'ssubprocess.run. The implementation follows security best practices by using argument lists instead of shell strings (avoidingshell=True) and strictly validating all parameters likeregionandinstance-idagainst regular expressions before execution. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for users to install or upgrade the Alibaba Cloud CLI using official channels, such as Homebrew and the vendor's GitHub repository. These references target trusted vendor resources and do not involve silent or unverified remote code execution.
- [DATA_EXPOSURE]: The skill accesses cloud metadata (VPC and vSwitch IDs, Account UIDs) to determine network egress capabilities. All sensitive infrastructure data is retrieved via the official CLI using the agent platform's default credential chain, and the skill does not perform any external data exfiltration.
- [REMOTE_CODE_EXECUTION]: Although the skill invokes an external binary (
aliyunCLI), it is the primary intended function of the diagnostic tool. The scripts utilize standard library modules and do not include dynamic code generation or remote script piping.
Audit Metadata