Security audit
Security checks for vulnerabilities and agentic risk
This skill matches its Alibaba Cloud infrastructure purpose, but it runs a downloaded local runtime with broad inherited environment access, so users should review it before installing.
Install only if you trust the iac-code runtime publisher and are comfortable letting it operate Alibaba Cloud infrastructure. Use a dedicated shell/session without unrelated API keys in the environment, configure narrow RAM permissions, and review every permission or deployment confirmation before allowing changes.
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
Use the single standard-library entry point at `scripts/iac_code.py`. Never install `iac-code` with pip and never invoke a headless command. Run every command b
The installer or Skill distributor may place an optional `config.json` beside this `SKILL.md`:
config_path = root / "a2a.json"
_atomic_json(config_path, config)
log_path = root / "runtime.log"
environment = dict(os.environ)
environment["IAC_CODE_MODE"] = mode
environment.pop("IACCODE_A2A_ALLOWED_CWDS", None)
environment["IAC_CODE_A2A_TRUST_REQUEST_CWD"] = "1"raise BridgeError("a2a_transport_failed", "The prompt file could not be read as UTF-8.") from exc
if not prompt.strip() or len(prompt.encode("utf-8")) > 1024 * 1024:
raise BridgeError("a2a_transport_failed", "The prompt file is empty or too large.")
return prompt
def _preferred_language(prompt, requested):The recommended wait is 60 seconds and the bridge enforces a 120-second maximum even if a larger value is supplied. If a result says `state: input-required` but does not contain `inputRequired`, there is no user boundary to answer. Report its `latestText` or error, keep the same job unchanged, and stop. Never call `continue`, repeat `respond`, call `cancel`, or start a replacement job unless the user explicitly requests that action. 5. When `state` is `turn_completed`, treat `finalText` and `artifacts` as the authoritative normal-turn result. When a Pipeline reaches any terminal state, including `completed`, `failed`, `canceled`, or `rejected`, treat `pipelineResult` and `artifacts` as its authoritative result and present its success or failure details directly. If rollback cleanup is pending, the bridge automatically runs a cleanup-only normal task in the same context before returning the Pipeline result; keep following it and handle any returned permission normally. If cleanup is `failed` or `unavailable`, report that manual inspection or retry is required and do not claim it succeeded. Never send a synthetic cleanup prompt or a follow-up merely to retrieve or summarize an existing result. Never recover an answer from Session files, spool files, logs, or raw tool-result files. 6. To send the next natural-language message in the same normal conversation, or after a completed Pipeline has handed the same conversation to normal mode, write it to another workspace prompt file and continue the existing job: ```text
raise BridgeError("artifact_verification_failed", "The extracted runtime identity is invalid.")
if os.name != "nt":
os.chmod(str(staged_executable), os.stat(str(staged_executable)).st_mode | stat.S_IXUSR)
check = subprocess.run(
[str(staged_executable), "--version"],
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,raise BridgeError("artifact_verification_failed", "The extracted runtime identity is invalid.")
if os.name != "nt":
os.chmod(str(staged_executable), os.stat(str(staged_executable)).st_mode | stat.S_IXUSR)
check = subprocess.run(
[str(staged_executable), "--version"],
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,"token": token,
"persistence_dir": str(persistence),
"artifact_dir": str(artifacts),
"auto_approve_permissions": False,
"thinking_exposure": ["tool-trace"],
"log_to_stdout": False,
"idle_shutdown_seconds": RUNTIME_IDLE_TIMEOUT_SECONDS,ready = False
try:
with log_path.open("ab", buffering=0) as log:
process = subprocess.Popen(
command,
cwd=str(root),
env=environment,ready = False
try:
with log_path.open("ab", buffering=0) as log:
process = subprocess.Popen(
command,
cwd=str(root),
env=environment,log_path = root / "worker.log"
creationflags = getattr(subprocess, "CREATE_NEW_PROCESS_GROUP", 0) if os.name == "nt" else 0
with log_path.open("ab", buffering=0) as log:
process = subprocess.Popen(
command,
stdin=subprocess.DEVNULL,
stdout=log,log_path = root / "worker.log"
creationflags = getattr(subprocess, "CREATE_NEW_PROCESS_GROUP", 0) if os.name == "nt" else 0
with log_path.open("ab", buffering=0) as log:
process = subprocess.Popen(
command,
stdin=subprocess.DEVNULL,
stdout=log,input_file = getattr(args, "input_file", None)
inline_decision = getattr(args, "decision", None)
if input_file:
if any(getattr(args, key, None) for key in ("input_id", "tool_use_id", "decision")):
raise BridgeError(
"input_response_mismatch",
"Use either an input file or an inline permission decision, not both.",No suspicious patterns detected.