skills/aliyun/alibabacloud-aiops-skills/alibabacloud-ecs-vpc-publicnetwork-troubleshoot/Gen Agent Trust Hub
alibabacloud-ecs-vpc-publicnetwork-troubleshoot
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The scripts
sts_create.py,ecs_public_troubleshoot.py, andvpc_service_public_troubleshoot.pyusesubprocess.runandsubprocess.check_outputto invoke thealiyuncommand-line interface. - Evidence: In
scripts/ecs_public_troubleshoot.py,call_cliexecutesaliyunwith parameters likebssopenapi,antiddos-public, andcloudfwto retrieve diagnostic data. - Context: These executions are used to retrieve metadata not available via the standard Python SDK common request and are restricted to read-only diagnostic queries.
- [DATA_EXFILTRATION]: The skill performs network requests to
*.aliyuncs.comdomains using thealiyun-python-sdk-corelibrary. - Evidence:
call_apifunction in diagnostic scripts communicates with Alibaba Cloud OpenAPI endpoints for ECS, VPC, and STS services. - Context: These operations are consistent with the skill's primary purpose of diagnosing cloud infrastructure and target official vendor API endpoints.
- [CREDENTIALS_UNSAFE]: The skill manages authentication tokens by caching them in a local file.
- Evidence:
scripts/sts_create.pywrites temporary STS credentials toscripts/.sts_cache.jsonwith file permissions set to0o600(owner read/write only). - Context: This is a standard practice for local credential management in CLI tools to avoid passing secrets via command-line arguments, which would be visible in process lists.
Audit Metadata