alibabacloud-cfw-status-overview
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for read-only monitoring of Alibaba Cloud Firewall status through the official
aliyunCLI tool. No destructive operations or unauthorized modifications are performed. - [SAFE]: Proactive security instructions are included to prevent the agent from printing or handling sensitive credentials (AK/SK), ensuring that authentication remains handled by the underlying environment's secure configuration.
- [SAFE]: All external downloads and documentation links reference verified vendor infrastructure (alicdn.com and aliyun.com), which are consistent with the skill author 'aliyun'.
- [SAFE]: The workflow follows a strict 'least privilege' approach, recommending read-only RAM policies (e.g., AliyunYundunCloudFirewallReadOnlyAccess) and limiting actions to querying status APIs.
Audit Metadata