alibabacloud-oss-manage-network-probe
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download the official Alibaba Cloud CLI from the aliyuncli.alicdn.com domain. As the skill's author is aliyun, this is a trusted vendor resource for administrative tools.
- [COMMAND_EXECUTION]: It utilizes the aliyun CLI to perform network diagnostics and OSS management. The instructions mandate the use of the CLI's ai-mode safety feature to block dangerous operations and require a specific user-agent for all API-calling commands.
- [DYNAMIC_EXECUTION]: The skill uses a local script generation pattern to handle presigned URLs securely. By writing a temporary bash script that reads the URL from a file rather than passing it as a command argument, it prevents sensitive signature data from being leaked into shell history or process logs.
- [CREDENTIALS_SAFE]: The skill contains strong safety guardrails that prohibit the AI agent from reading, echoing, or asking for Alibaba Cloud Access Keys (AK/SK). It directs users to configure their credentials securely in their own environment.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a surface for processing user-supplied parameters such as bucket and object names. This risk is addressed through mandatory instructions to confirm all customizable parameters with the user before any command is executed.
Audit Metadata