alibabacloud-cas-ssl-cert-purchase

• Outcome: Pass
• Latest audit: Jul 30, 2026 · 10:58 AM UTC
• Version: 0.0.1

Overview

This skill is a disclosed Alibaba Cloud certificate purchase/application workflow with real billing authority, but its sensitive actions are purpose-aligned and gated by explicit user confirmation.

Install only if you intend to let an agent help manage Alibaba Cloud CAS certificates and potentially create billable certificate orders. Use a least-privilege RAM profile, verify CLI installation sources yourself, avoid pasting raw access keys into chat, and do not approve purchase or apply prompts unless the domain, CA, duration, cost expectation, and account profile are correct.

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger list contains broad phrases such as 'purchase certificate' and similar multilingual variants that could activate the skill in conversations where the user has not clearly consented to a billing or certificate workflow. In this skill, unintended activation is more dangerous because later steps can lead to paid purchases and irreversible certificate application actions, even though the skill includes confirmation gates.

Vague Triggers

High

• Confidence: 97% confidence
• Finding: The phrase 'or any scenario requiring a certificate application to Alibaba Cloud CAS' is an ambiguous catch-all trigger that can match many loosely related requests. Because this skill can enumerate cloud resources, modify certificate instances, and initiate purchases, an overly broad trigger materially increases the risk of unintended operational or billable actions from ordinary support requests.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The referenced section provides ready-to-run purchase commands that create SSL certificate instances through Alibaba Cloud BSS APIs, but it does not warn that these operations may incur real charges. In an agent skill that is explicitly designed to automate certificate purchasing, omission of billing and confirmation safeguards increases the chance of unintended paid actions, especially if an agent executes these examples on behalf of a user.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The guide instructs users to execute a network-fetched shell script directly via curl-to-shell. This bypasses review and integrity verification, so if the remote server, CDN, DNS, or transport path is compromised, arbitrary code can run immediately on the host. In an agent skill context, this is more dangerous because users may follow the command verbatim in privileged environments.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The manual install examples stream an archive directly from the network into tar, which extracts unreviewed remote content without any checksum or signature verification. Although this is less direct than curl-to-shell, it still trusts network-delivered artifacts blindly and can lead to installation of tampered binaries or malicious archive contents. Because this skill is about cloud certificate operations, users may run these steps on sensitive administrative systems, increasing the blast radius.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: This error-handling reference describes automatic certificate purchasing and retry/resume behavior but does not begin with a clear warning that the workflow can trigger billable actions. In a purchasing skill, omission of billing-risk disclosure increases the chance that operators or downstream agents invoke recovery steps that create paid resources without fully informed user consent.

Static analysis

No suspicious patterns detected.