Alibabacloud Sas Incident Manage
Security checks across malware telemetry and agentic risk
Overview
The skill's claims match its instructions: it operates via the Aliyun CLI/cloud-siem plugin and expects pre-configured Alibaba Cloud credentials; nothing requested appears unrelated or excessive.
This skill is internally consistent: it runs Aliyun CLI cloud-siem commands and expects your Alibaba Cloud credentials to already be configured (via aliyun configure, instance role, or an existing profile). Before installing or invoking it: 1) Confirm you trust the source and that the Aliyun CLI/plugin installs come from the official aliyuncdn/official repos; 2) Ensure credentials are configured with least privilege (create a RAM policy limited to the listed actions) and avoid pasting secrets into chat; 3) Note that some reference docs mention helper scripts (e.g., scripts/siem_client.py) which are not included — you will not be able to run those verification scripts unless you obtain them separately; 4) If you allow autonomous agent invocation, be aware the agent can run the CLI commands against your cloud account (this is expected behavior for this kind of skill) — verify the credential profile used and restrict permissions accordingly.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.