skills/aliyun/alibabacloud-aiops-skills/alibabacloud-ddos-origin-exposure-detector/Gen Agent Trust Hub
alibabacloud-ddos-origin-exposure-detector
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Alibaba Cloud CLI setup script from 'https://aliyuncli.alicdn.com/setup.sh'. As this domain belongs to the skill's author (aliyun), the download is considered a legitimate vendor resource for environment preparation.
- [REMOTE_CODE_EXECUTION]: The environment pre-check step in 'SKILL.md' uses 'bash -c' to execute a remote script downloaded via 'curl'. While this is a high-risk pattern, it targets the official Alibaba Cloud installation endpoint, aligning with the vendor's provided tools for managing cloud resources.
- [DYNAMIC_EXECUTION]: The reference scripts ('scripts/fetch_config.py', 'scripts/create_probes.py', and 'scripts/parse_probe_log.py') utilize 'subprocess.run' to execute shell commands. These scripts invoke 'aliyun' CLI commands and system utilities like 'dig' and 'nc' to retrieve configuration and perform network connectivity tests. The commands are constructed using data retrieved from cloud APIs, such as domain names and IP addresses.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, specifically forwarding rules and monitor logs retrieved via Alibaba Cloud APIs.
- Ingestion points: Data enters the context through 'aliyun ddoscoo describe-web-rules', 'describe-network-rules', and 'aliyun cms describe-site-monitor-log'.
- Boundary markers: The skill relies on structured JSON parsing within the provided scripts rather than natural language delimiters.
- Capability inventory: The skill has the capability to execute shell commands ('aliyun', 'dig', 'nc') based on the ingested data.
- Sanitization: The Python scripts implement basic filtering, such as regex validation for IP addresses in 'fetch_config.py', to verify the integrity of the data before processing.
Audit Metadata