alibabacloud-elasticsearch-instance-diagnose

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: External tools such as the Aliyun CLI and curl are invoked using subprocess.run with argument lists in scripts/openapi_cli_collect.py and scripts/check_es_instance_health.py, avoiding shell execution risks. The skill also includes input validation to sanitize command-line arguments against injection attacks.
  • [CREDENTIALS_UNSAFE]: Detailed instructions in SKILL.md and referenced SOPs provide clear boundaries for managing sensitive credentials, ensuring they are never echoed or hardcoded, and instead managed via secure local environment configurations.
  • [EXTERNAL_DOWNLOADS]: The skill references the official Alibaba Cloud CLI installation from trusted vendor-controlled domains in references/cli-installation-guide.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 01:52 AM