alibabacloud-lb-healthcheck

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the subprocess.run function in scripts/_cli.py to invoke the Alibaba Cloud CLI (aliyun) in plugin mode. This is a legitimate and necessary mechanism for the skill to perform infrastructure diagnostics using the platform's official tooling.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation and scripts/requirements.txt identify dependencies on the aliyun CLI and its product-specific plugins (e.g., aliyun-cli-slb, aliyun-cli-vpc). These are standard requirements for interacting with the vendor's cloud services.
  • [DATA_EXFILTRATION]: The _cli.py script includes a helper function that reads the local ~/.aliyun/config.json file. This operation is limited to resolving the region_id for the current profile to ensure diagnostic queries are directed to the correct cloud region, which is a standard procedure for cloud management software.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 11:33 AM
Security Audit — agent-trust-hub — alibabacloud-lb-healthcheck