alibabacloud-cms-alert-rule-create
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes official
aliyunCLI commands to interact with Alibaba Cloud services. This is the primary intended function and is performed using standard tooling from the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied configuration data, such as alert thresholds and resource identifiers, which are interpolated into CLI commands. This attack surface is mitigated by mandatory user confirmation steps before execution and a local parameter validation script (
scripts/validate-params.sh) that ensures inputs conform to expected formats and limits. - [EXTERNAL_DOWNLOADS]: The skill includes an instruction to update CLI plugins via
aliyun plugin update. This is a standard maintenance operation for the official vendor tool and targets trusted infrastructure. - [DATA_EXFILTRATION]: The skill's operational instructions explicitly restrict network activity to official Alibaba Cloud domains (e.g.,
cms.aliyuncs.com,metrics.aliyuncs.com), preventing unauthorized data transmission to external or untrusted destinations.
Audit Metadata