Read-only forensics for OSS traffic abuse and security incidents (overnight traffic spikes, suspected AK leak, hotlinking). Audits exposure (ACL, policy, public-access block, Referer), runs the 6-step SLS log query sequence, routes root causes, outputs containment checklists. Triggers: "OSS traffic spike overnight", "traffic abuse", "strange files in my bucket", "suspected AK leak on OSS", "hotlinking abuse", "unexpected outbound traffic", "unauthorized downloads from my bucket". Do NOT use: for transfer error cod…
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
.claude/skills/alibabacloud-oss-security-incident-forensicsRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
.agents/skills/alibabacloud-oss-security-incident-forensicsRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
skills/alibabacloud-oss-security-incident-forensicsRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @sdk-team/alibabacloud-oss-security-incident-forensicsclawhub inspect @sdk-team/alibabacloud-oss-security-incident-forensics --version 0.0.1This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
sha256:4891dca186b2367a995b917f6de29cc519cd91fe671cf2ecf335b3c14b039555references/exposure-check.mdreferences/manifest.jsonreferences/ram-policies.mdreferences/traffic-abuse-playbook.mdscripts/_doc_lookup.pyscripts/_log_evidence.pyscripts/_oss_client.pyscripts/_sls_query.pyscripts/oss_traffic_forensics.pyscripts/requirements.txtscripts/sts_token.pyskill-card.mdSKILL.mdInitial release: read-only forensics of Alibaba Cloud OSS security incidents. - Provides root-cause analysis and read-only log audits for OSS traffic abuse, AK leaks, hotlinking, and suspicious bucket activity. - Enforces strict read-only operations; never performs or suggests mutating actions—only supplies containment checklists. - Runs all diagnostics exclusively via bundled scripts, not by constructing new API or SDK commands. - Cites OSS official documentation directly via script integration; never fabricates URLs or doc references. - Clearly defines trigger conditions and boundaries; routes unrelated requests to appropriate sibling skills. - Attaches clear reporting, error handling, and observability controls on all forensic tasks.