skills/aliyun/alibabacloud-aiops-skills/alibabacloud-ddoscoo-port-configuration-backup/Gen Agent Trust Hub
alibabacloud-ddoscoo-port-configuration-backup
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill implements strong security gates for credential management. It explicitly forbids the agent from reading, echoing, or prompting for AccessKey/SecretKey values, instead requiring the use of pre-configured local Aliyun CLI profiles.
- [DATA_EXFILTRATION]: The skill collects and exports cloud configuration data to local YAML files. It includes a session-tracking mechanism by appending a unique session ID to the
User-Agentheader of cloud API requests for observability; this behavior is restricted to communication with official Alibaba Cloud services and does not exfiltrate sensitive user identity data. - [EXTERNAL_DOWNLOADS]: The instructions recommend running
aliyun plugin updateto maintain the DDoS Pro plugin. These updates are fetched from official Alibaba Cloud repositories, consistent with the vendor's own tooling and the skill's stated purpose. - [PRIVILEGE_ESCALATION]: The skill encourages security hardening by instructing the agent to set backup file permissions to
0600, ensuring that configuration files are not readable by other users on the system. - [INDIRECT_PROMPT_INJECTION]: The import workflow involves ingesting local YAML files. The skill mitigates risks by requiring strict schema validation, identity matching by resource ID rather than position, and ownership verification before any modification or deletion of cloud resources.
Audit Metadata