alibabacloud-waf-openapi-error-diagnosis

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides an alternative installation method for the Aliyun CLI by downloading and piping a setup script from https://aliyuncli.alicdn.com/setup.sh to a shell. This resource belongs to the official vendor CDN and is used for tool setup.
  • [DYNAMIC_EXECUTION]: The script scripts/diagnose_openapi_error.py invokes the aliyun CLI using subprocess.run to retrieve help text for API actions. The commands are constructed using argument lists, which prevents command injection.
  • [DATA_EXFILTRATION]: The skill attaches a session ID and version information to the User-Agent string of all API calls and CLI commands. This data is used for official telemetry and attribution to the Alibaba Cloud metadata services.
  • [COMMAND_EXECUTION]: The skill instructs the agent to check credential status using aliyun configure list. This is a standard management command for the vendor's CLI and does not expose sensitive secret values.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided API parameters and error messages for diagnosis via the params argument in scripts/diagnose_openapi_error.py. While no explicit boundary markers are present in the processing logic, the skill's capabilities are restricted to read-only metadata lookups and CLI help retrieval, and it performs validation against official vendor specifications.
  • [EXTERNAL_DOWNLOADS]: The skill installs the aliyun-cli-waf-openapi plugin using the aliyun plugin install command. This is an official extension for the vendor's CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:05 AM