The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/get_waf_logs.py invokes the aliyun CLI using subprocess.run. It employs security best practices by passing command arguments as a list to prevent shell injection and applies strict regular expression validation to user-provided parameters like SLS project names, logstore names, and instance IDs.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes WAF logs containing external, potentially attacker-controlled data, which presents a surface for indirect prompt injection.
Ingestion points: WAF logs are retrieved from Alibaba Cloud SLS within the scripts/get_waf_logs.py script and the query workflow described in SKILL.md.
Boundary markers: The instructions provide a specific markdown template for the final analysis report to structure the agent's output.
Capability inventory: The skill possesses write capabilities through the aliyun waf-openapi modify-defense-rule-status command, allowing it to disable WAF rules.
Sanitization: The Python script implements explicit masking logic to redact or truncate sensitive fields like IP addresses, cookies, authorization tokens, and URI query parameters before the agent processes the log entries.

alibabacloud-waf-checkresponse-intercept-query