alibabacloud-website-malware-check
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs HTTP GET requests to external websites provided by the user to analyze them for malware.
- Evidence: Found in scripts/website_malware_check.py and scripts/multi_ua_probe.py.
- Protection: Robust SSRF (Server-Side Request Forgery) guards are implemented in normalize_target_url and validate_url, which resolve hostnames and block non-global/private IP addresses and cloud metadata services.
- [COMMAND_EXECUTION]: The skill executes the aliyun CLI via Python's subprocess module to verify identity and query cloud security events.
- Evidence: Found in scripts/sts_token.py and documented in SKILL.md.
- Protection: Commands are executed with static arguments and the CLI's default credential chain is used, avoiding manual credential handling.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted HTML and JavaScript content from external websites.
- Ingestion points: External content fetched in scripts/website_malware_check.py and scripts/multi_ua_probe.py.
- Boundary markers: The skill uses a defined report template in references/report-template.md to structure the agent's output.
- Capability inventory: CLI commands for identity and security events (SAS/WAF) are invoked to corroborate findings.
- Sanitization: Content is parsed using BeautifulSoup to identify specific malicious indicators (hidden links, redirects) rather than executing the analyzed content.
Audit Metadata