Security audit
Alibabacloud Httpdns
Security checks for vulnerabilities and agentic risk
Overview
This skill manages Alibaba Cloud HTTPDNS through the official CLI, with sensitive actions disclosed and guarded by masking, validation, and confirmation steps.
Install this only if you want an agent to manage Alibaba Cloud HTTPDNS resources. Use a least-privilege RAM profile, avoid granting add/delete/refresh permissions for reporting-only use, and request raw account secrets only when truly necessary.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.