Real Skill packageSource verifiedClawHub registry

alibabacloud-waf-rule-effectiveness-check

Diagnose why a configured Alibaba Cloud WAF 3.0 custom protection rule (custom ACL, CC / rate limiting, scan protection, IP blacklist) is not working: name the first broken link in the chain and hand back the console fix path. Read-only checks of configuration state only; never sends test traffic. Use it when a customer says a rule has no effect at all, a rule matches in the logs but nothing is blocked, an attack that should have been blocked got through, a rule worked yesterday but not today, or a CC or rate-limi…

Identity and source

Publisher attributionalibabacloud-skills-teamregistry owner unverified by skillvetai
Functional categoryDevOps, Cloud & Observabilityautomatically inferred · 59% rule confidence
Package forminstruction with code13 recorded files
Canonical sourceClawHub registryclawhub:sdk-team:alibabacloud-waf-rule-effectiveness-check
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 8/24/2026.claude/skills/alibabacloud-waf-rule-effectiveness-check

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 8/24/2026.agents/skills/alibabacloud-waf-rule-effectiveness-check

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 8/24/2026skills/alibabacloud-waf-rule-effectiveness-check

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @sdk-team/alibabacloud-waf-rule-effectiveness-check
clawhub inspect @sdk-team/alibabacloud-waf-rule-effectiveness-check --version 0.0.1

Security evidence

SkillVetAI static result: medium signal

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
full text content
Files
13 / 13 inspected as text
Checked
8/24/2026, 1:20:36 PM
Scanner
0.1.3
Policy
1.0.3
2 automated findings
mediumRemote installer is downloaded without an integrity checkSKILL.md:114 · confidence 70%curl -fsSL --connect-timeout 10 --max-time 120 https://aliyuncli.alicdn.com/setup.sh
mediumRemote installer is downloaded without an integrity checkreferences/cli-installation-guide.md:37 · confidence 70%curl -fsSL --connect-timeout 10 --max-time 120 https://aliyuncli.alicdn.com/setup.sh
4 inferred permission indicators
  • shell execution — automatically inferred
  • network access — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
5 dependency and API indicators
  • api: aliyuncli.alicdn.com
  • api: clawhub.ai
  • api: help.aliyun.com
  • api: ram.console.aliyun.com
  • api: www.alibabacloud.com
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
8/24/2026, 11:59:53 AM
Release binding
Matches this record
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:971e6855697d1c0f1292d5f28d9bcbb90ec1fefa6a9b282e2dc89824d996d4a6
Show up to 13 recorded paths
  • references/acceptance-criteria.md
  • references/cli-installation-guide.md
  • references/effectiveness-chain-basics.md
  • references/ram-policies.md
  • references/related-commands.md
  • references/remediation-table.md
  • references/scenario-description.md
  • references/symptom-checklists.md
  • references/verification-method.md
  • scripts/check_rule_effectiveness.py
  • scripts/requirements.txt
  • skill-card.md
  • SKILL.md

Source changelog

Initial release – diagnose why Alibaba Cloud WAF 3.0 custom protection rules are not effective. - Statistically checks if a custom WAF rule is in effect and identifies the first broken configuration link. - Supports ACL, CC/rate limiting, scan protection, and IP blacklist rules ("DefenseOrigin=custom"). - Read-only: verifies platform configuration; does not generate test traffic or make changes. - Handles missing/ambiguous inputs by prompting the customer before proceeding. - Outputs clear root causes with actionable console paths for fixes, in customer's language.