aliyun-ecs-spot-provision
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the Alibaba Cloud CLI (aliyun) and ssh-keygen via a Python wrapper script. The script uses subprocess.run with list-based arguments, which prevents shell injection vulnerabilities.\n- [SAFE]: The implementation follows security best practices for cloud provisioning, such as requiring explicit CIDR ranges for SSH access, performing dry-run checks before resource creation, and ensuring generated private keys are stored with restricted local file permissions (mode 0600).
Audit Metadata