alibabacloud-website-probe
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by the vendor 'aliyun' and interacts with 'boce.aliyun.com', which is an official and trusted vendor resource.
- [SAFE]: No hardcoded credentials, secrets, or sensitive file access patterns (e.g., to .ssh, .aws, or .env files) were found. The skill explicitly states it requires no cloud credentials or RAM policies.
- [SAFE]: Network communication is strictly confined to the legitimate probing platform domain for task submission and result polling.
- [SAFE]: The skill utilizes standard, verifiable Python dependencies (
requestsandurllib3) from official registries. - [SAFE]: File system operations are appropriately restricted to writing probe results to temporary files and maintaining a session cache in the user's home directory (
~/.qoderwork/cache), which is standard practice for CLI-based session management. - [SAFE]: The instruction set reinforces a read-only posture, prohibiting the agent from modifying configurations and restricting execution to the provided local scripts.
Audit Metadata