The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/_oss_client.py invokes the official aliyun CLI using subprocess.run to perform an identity check (sts get-caller-identity). This is a legitimate diagnostic step to verify session context. The command is constructed using a fixed list of arguments rather than a shell string, which prevents command injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The scripts/_doc_lookup.py module fetches documentation from help.aliyun.com. This is an official vendor resource used to provide the user with accurate, up-to-date guidance. The download logic employs a strict host whitelist and protocol enforcement (HTTPS).
[CREDENTIALS_SAFE]: The skill uses the default Alibaba Cloud credential chain, resolving sensitive keys from standard environment variables such as ALIBABA_CLOUD_ACCESS_KEY_ID. This approach avoids hardcoding secrets and adheres to secure cloud authentication practices.
[SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or persistence mechanisms were detected. The skill implements strict read-only enforcement, prohibiting any mutating API calls.

alibabacloud-oss-image-processing-diagnosis