The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/check_tls.py uses subprocess.run to execute system commands such as openssl, dig, nc, and powershell. All calls are constructed using argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities.
[COMMAND_EXECUTION]: In scenarios where shell features are required (such as using bash -c for telnet pipes on Linux or powershell -Command on Windows), the script performs strict pre-validation. Specifically, target addresses are verified as valid IP addresses using the ipaddress module before being interpolated into the command strings, mitigating risks associated with untrusted input.
[DATA_EXPOSURE]: The skill includes a batch check capability that reads domain names from a user-specified file. The script parses the file line-by-line and only utilizes the content as input for DNS and connectivity checks. It does not display the raw file content or perform write operations, minimizing the risk of sensitive data exposure.
[SAFE]: The skill metadata and implementation are consistent with its stated purpose of providing read-only diagnostics without requiring credentials or elevated privileges.

alibabacloud-tls-cert-diagnosis