aliyun-vpc-manage
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official Alibaba Cloud SDKs (such as
alibabacloud_vpc20160428andalibabacloud_ecs20140526) to interact with cloud infrastructure APIs. - [SAFE]: Credential handling follows secure patterns by using environment variables (e.g.,
ALIBABACLOUD_ACCESS_KEY_ID) and standard local configuration files (~/.alibabacloud/credentials) rather than hardcoding secrets. - [SAFE]: Network operations are restricted to official Alibaba Cloud API endpoints (e.g.,
*.aliyuncs.com), which are recognized as well-known and trusted services. - [SAFE]: Command execution is limited to standard Python script execution and a validation step in the instruction file that performs basic syntax checking using
py_compile. - [SAFE]: The logic for managing resources (creating/deleting VPCs and VSwitches) is consistent with the skill's stated purpose and contains no hidden or malicious persistence, obfuscation, or data exfiltration techniques.
Audit Metadata