skills/aliyun/alibabacloud-aiops-skills/alibabacloud-network-reachability-analysis/Gen Agent Trust Hub
alibabacloud-network-reachability-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Aliyun CLI binary from the vendor's distribution domain (aliyuncli.alicdn.com). These resources originate from the skill author's infrastructure and are necessary for the skill's functionality.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
aliyunCLI commands to perform network path analysis (nis) and fetch monitoring metrics (cms). These operations are consistent with the stated purpose of network troubleshooting and follow the provided read-only guidance. - [PRIVILEGE_ESCALATION]: The installation guide suggests using
sudoto move the Aliyun CLI binary to/usr/local/bin/. This is a standard administrative procedure for installing software system-wide and is not used for malicious privilege gain. - [INDIRECT_PROMPT_INJECTION]: The skill processes network topology data and monitoring metrics returned by the Alibaba Cloud API to generate visual diagrams and diagnostic summaries. While this involves ingesting external data into the agent's context, the surface is limited to structured cloud metadata from the vendor's own services.
Audit Metadata