alibabacloud-aisc-skill-inspection

alibabacloud-aisc-skill-inspection is an Application security skill for AI agents, published by aliyun in the alibabacloud-aiops-skills repository on GitHub. Skillspace rates alibabacloud-aisc-skill-inspection C (73/100) and it passed the safety scan; the rating is based on static analysis only.

Submit Alibaba Cloud AISC Skill file security scans, poll scan tasks, diagnose API or upload failures, and interpret scan reports for malicious code, prompt injection, hardcoded credentials, sensitive data, risky configuration, and other Skill package security findings. Use when the user asks whether a Skill package or Skill file is safe, wants to scan/check/detect a Skill package, provides one or more Skill download URLs for AISC security detection, asks to run or poll CreateSkillFileCheck/ListSubTasks, asks about check-report.json or rootTaskId status, needs help with permission/parameter/throttling/system scan errors, or needs to choose between multiple candidate Skill files for security scanning. Trigger phrases include AISC scan, Skill security check, Skill file check, Skill 安全检测, Skill 文件安全扫描, 扫描 Skill 包, 检测 Skill 是否安全, and 检查 Skill 文件有没有恶意代码/敏感凭据/prompt 注入.

Grade
C
Quality
73 / 100
Safety
Passed
GitHub stars
191

Unproven: rated by static analysis only, not yet compared head-to-head.

Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: it looks like a template or a stub that was never filled in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
94 / 100
Maturity
Structured: ships references or scripts
Security scan
Low-risk patterns
License
Not declared. Check the repository before reusing it.
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • mentions secrets in text

Not checked yet

  • Category is a classifier prediction; no model has read this skill yet
  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.