skills/aliyun/alibabacloud-aiops-skills/alibabacloud-oss-lifecycle-runtime-diagnosis/Gen Agent Trust Hub
alibabacloud-oss-lifecycle-runtime-diagnosis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official
aliyunCLI to verify the caller's identity via thests get-caller-identitycommand. The command is constructed as a list of arguments and executed viasubprocess.run, preventing shell injection vulnerabilities.\n- [EXTERNAL_DOWNLOADS]: Thescripts/_doc_lookup.pyscript fetches documentation excerpts fromhelp.aliyun.com. This target is a well-known service associated with the skill's author (aliyun) and is used for providing verified help content.\n- [SAFE]: The skill implements strict read-only enforcement through its instructions and code, ensuring no mutating operations (likePutBucketLifecycleorRestoreObject) are performed. It also relies on standard environment variable credential chains, avoiding the use of hardcoded secrets.
Audit Metadata