ipv6-ddns-aliyun
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires a dependency,
aliyun-domain-skill, which it attempts to install from the same author's repository (shigzz/aliyun-skills). This is a standard dependency management pattern for multi-skill projects from the same vendor. - [COMMAND_EXECUTION]: The skill uses
curl 6.ipw.cnto retrieve the machine's public IPv6 address. This is a common and legitimate practice for DDNS tools to verify connectivity and resolve the public-facing address. - [CREDENTIALS_UNSAFE]: The skill documentation correctly instructs users to manage Alibaba Cloud AccessKeys via environment variables or
.envfiles rather than hardcoding them, which aligns with standard secret management security practices.
Audit Metadata