The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes a bundled Python script scripts/fix_certchain.py that executes openssl binaries via subprocess.run to perform certificate inspection, verification, and formatting. The script uses structured list arguments for these calls, which is a secure practice to prevent command injection.
[EXTERNAL_DOWNLOADS]: The repair functionality in scripts/fix_certchain.py fetches intermediate certificates from CA-provided AIA (Authority Information Access) URLs. The script implements security controls including DNS-pinning to public IP addresses, rejecting local/private network addresses, and enforcing a 1 MiB response size limit to prevent resource exhaustion or internal network probing.
[REMOTE_CODE_EXECUTION]: The references/cli-installation-guide.md file provides a command to install the Aliyun CLI using a piped shell script from aliyuncli.alicdn.com. As this resource belongs to the vendor's official infrastructure and matches the skill author's identity, it is a standard and expected installation method for the required tooling.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of local PEM files and certificate metadata retrieved from network sources, which constitutes an indirect injection surface.
Ingestion points: Certificate data is ingested from local files specified by the user and from remote AIA URLs during the repair process.
Boundary markers: The skill relies on standard PEM delimiters (-----BEGIN CERTIFICATE-----) but does not implement specific 'ignore' instructions for content inside the certificates.
Capability inventory: The skill possesses file-reading, network-fetching, and subprocess-execution capabilities.
Sanitization: The Python script validates that all network requests target global public IPs and uses regex-based extraction to isolate certificate blocks from the input data.

alibabacloud-waf-certchain-complete