alibabacloud-oss-lifecycle-runtime-diagnosis

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the official aliyun CLI to verify the caller's identity via the sts get-caller-identity command. The command is constructed as a list of arguments and executed via subprocess.run, preventing shell injection vulnerabilities.\n- [EXTERNAL_DOWNLOADS]: The scripts/_doc_lookup.py script fetches documentation excerpts from help.aliyun.com. This target is a well-known service associated with the skill's author (aliyun) and is used for providing verified help content.\n- [SAFE]: The skill implements strict read-only enforcement through its instructions and code, ensuring no mutating operations (like PutBucketLifecycle or RestoreObject) are performed. It also relies on standard environment variable credential chains, avoiding the use of hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:20 AM