skills/aliyun/alibabacloud-aiops-skills/alibabacloud-ecs-vpc-publicnetwork-troubleshoot/Gen Agent Trust Hub
alibabacloud-ecs-vpc-publicnetwork-troubleshoot
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes bundled Python scripts (
sts_create.py,ecs_public_troubleshoot.py,vpc_service_public_troubleshoot.py) and standardaliyunCLI commands for diagnostics. These are standard operations for an administrative troubleshooting tool and are restricted to the bundled files. - [DATA_EXPOSURE]: The skill writes temporary Alibaba Cloud credentials to a local cache file (
scripts/.sts_cache.json). Analysis of the source code confirms the cache file is created with restricted permissions (0o600), and the skill includes explicit instructions against hardcoding or exporting secrets in plaintext. - [SAFE]: The Python scripts perform READ-ONLY Alibaba Cloud API queries (Describe/Get actions) only. They do not have capabilities to create, modify, or delete resources.
- [SAFE]: The skill requires explicit user confirmation of the diagnostic scope (resource ID and region) before any API calls are initiated.
- [SAFE]: External dependencies are restricted to the official
aliyun-python-sdk-corepackage, which is a well-known service library.
Audit Metadata