alibabacloud-oss-manage-network-probe

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download the official Alibaba Cloud CLI from the aliyuncli.alicdn.com domain. As the skill's author is aliyun, this is a trusted vendor resource for administrative tools.
  • [COMMAND_EXECUTION]: It utilizes the aliyun CLI to perform network diagnostics and OSS management. The instructions mandate the use of the CLI's ai-mode safety feature to block dangerous operations and require a specific user-agent for all API-calling commands.
  • [DYNAMIC_EXECUTION]: The skill uses a local script generation pattern to handle presigned URLs securely. By writing a temporary bash script that reads the URL from a file rather than passing it as a command argument, it prevents sensitive signature data from being leaked into shell history or process logs.
  • [CREDENTIALS_SAFE]: The skill contains strong safety guardrails that prohibit the AI agent from reading, echoing, or asking for Alibaba Cloud Access Keys (AK/SK). It directs users to configure their credentials securely in their own environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes a surface for processing user-supplied parameters such as bucket and object names. This risk is addressed through mandatory instructions to confirm all customizable parameters with the user before any command is executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 03:13 PM