skills/aliyun/alibabacloud-aiops-skills/alibabacloud-oss-event-notification-diagnosis/Gen Agent Trust Hub
alibabacloud-oss-event-notification-diagnosis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the Alibaba Cloud CLI (
aliyun sts get-caller-identity) to verify the caller's identity for traceability. This is implemented safely usingsubprocess.runwith an explicit argument list and no shell invocation, which prevents command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation excerpts from the official Alibaba Cloud Help Center (
help.aliyun.com). The network operations are restricted to this specific domain and are used solely to provide accurate, up-to-date diagnostic guidance to the user. - [SAFE]: The skill enforces a strict read-only policy, with multiple checks to ensure no mutating API calls (like
PutBucketNotification) are ever issued. It handles credentials securely by relying on the standard environment-based default credential chain, avoiding any direct handling or logging of sensitive keys.
Audit Metadata