alibabacloud-cms-alert-rule-create
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a secure process for managing cloud resources through the vendor's official CLI tools without any unauthorized behaviors.\n- [COMMAND_EXECUTION]: Executes aliyun CLI commands for querying and configuring CloudMonitor alert rules. The operations are limited to the scope of cloud monitoring management as defined in the RAM permissions reference.\n- [DATA_EXFILTRATION]: Network activity is restricted to authenticated Alibaba Cloud API endpoints (e.g., cms.aliyuncs.com). No sensitive configuration files or credentials are accessed or transmitted to external parties.\n- [PROMPT_INJECTION]: The skill enforces a rigorous validation workflow, including a pre-execution summary and mandatory user approval step, effectively mitigating risks of indirect instruction injection from external data sources.\n- [REMOTE_CODE_EXECUTION]: No patterns of remote script execution or unverifiable dependency downloads were identified. All script components are provided within the skill package and perform local validation tasks.
Audit Metadata