skills/aliyun/alibabacloud-aiops-skills/alibabacloud-waf-domain-cert-status-check/Gen Agent Trust Hub
alibabacloud-waf-domain-cert-status-check
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the Aliyun CLI binaries and setup scripts from official vendor infrastructure (
aliyuncli.alicdn.com). - [REMOTE_CODE_EXECUTION]: Executes the official installation script for the Aliyun CLI.
- [COMMAND_EXECUTION]: Invokes the
aliyunCLI tool to interact with Alibaba Cloud API services (waf-openapiandcas) for certificate metadata retrieval. - [INDIRECT_PROMPT_INJECTION]: The skill processes domain and certificate metadata retrieved from external cloud APIs, which theoretically could contain malicious instructions.
- Ingestion points: API responses from WAF and CAS services are processed in
scripts/check_cert_status.py. - Boundary markers: Not present in the script's data processing logic.
- Capability inventory:
scripts/check_cert_status.pyusessubprocess.runto execute thealiyunCLI tool. - Sanitization: The script performs JSON parsing and extracts specific fields (
EndDate,Expired,CertId) using pre-defined keys.
Audit Metadata