skills/aliyun/alibabacloud-aiops-skills/alibabacloud-waf-openapi-error-diagnosis/Gen Agent Trust Hub
alibabacloud-waf-openapi-error-diagnosis
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an alternative installation method for the Aliyun CLI by downloading and piping a setup script from
https://aliyuncli.alicdn.com/setup.shto a shell. This resource belongs to the official vendor CDN and is used for tool setup. - [DYNAMIC_EXECUTION]: The script
scripts/diagnose_openapi_error.pyinvokes thealiyunCLI usingsubprocess.runto retrieve help text for API actions. The commands are constructed using argument lists, which prevents command injection. - [DATA_EXFILTRATION]: The skill attaches a session ID and version information to the
User-Agentstring of all API calls and CLI commands. This data is used for official telemetry and attribution to the Alibaba Cloud metadata services. - [COMMAND_EXECUTION]: The skill instructs the agent to check credential status using
aliyun configure list. This is a standard management command for the vendor's CLI and does not expose sensitive secret values. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided API parameters and error messages for diagnosis via the
paramsargument inscripts/diagnose_openapi_error.py. While no explicit boundary markers are present in the processing logic, the skill's capabilities are restricted to read-only metadata lookups and CLI help retrieval, and it performs validation against official vendor specifications. - [EXTERNAL_DOWNLOADS]: The skill installs the
aliyun-cli-waf-openapiplugin using thealiyun plugin installcommand. This is an official extension for the vendor's CLI tool.
Audit Metadata