skills/aliyun/alibabacloud-aiops-skills/alibabacloud-cloud-native-internet-diagnostics/Gen Agent Trust Hub
alibabacloud-cloud-native-internet-diagnostics
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the official
aliyunCLI tool using Python'ssubprocess.runmethod to perform cloud resource queries. It correctly uses argument lists to prevent shell injection. - [DATA_EXPOSURE]: Accesses the local Alibaba Cloud configuration file at
~/.aliyun/config.jsonto resolve the current region setting for API operations. This is a standard procedure for cloud CLI integrations. - [EXTERNAL_DOWNLOADS]: Contains references and instructions for installing or upgrading the
aliyunCLI from trusted sources, including official GitHub releases and Homebrew. - [INDIRECT_PROMPT_INJECTION]: Processes data ingested from external Alibaba Cloud APIs. The skill mitigates risks by using structured JSON parsing and a sanitization routine (
_sanitize_message) that filters non-ASCII characters, collapses whitespace, and enforces length constraints on API messages.
Audit Metadata