Agent skill · aliyun
alibabacloud-tls-cert-diagnosis
Diagnose TLS/SSL certificate problems for a user-provided domain - trust chain verification, hostname/SAN matching, expiration check - with automatic DNS resolution and TCP connectivity root-cause analysis when a check fails. Use when the user reports a browser certificate error, HTTPS access fails and needs certificate-layer diagnosis, wants to verify a domain's TLS configuration, or asks for a certificate expiration check. Read-only diagnostics. Only checks domains the user explicitly provides. No write operations, no credentials required. Triggers: "certificate expired", "certificate not trusted", "SSL handshake failed", "hostname mismatch", "certificate check", "TLS certificate diagnosis", "HTTPS certificate error", "certificate validity check", "SAN mismatch", "certificate chain verification".
What it needs
About 5k tokens when loaded.
What this skill does
TLS Certificate Diagnosis Diagnose TLS/SSL certificate problems for a user-provided domain: certificate not trusted, hostname/SAN mismatch, expiration issues, and HTTPS access failures. The check flow resolves DNS, tests TCP connectivity, then verifies the certificate trust chain, hostname match, and validity period. When a check fails, a network pre-check and DNS diagnosis run automatically to pinpoint the root cause. Module Index Module Purpose File -------- --------- ------ DNS Diagnosis DNS status codes and diagnostic commands references/dnsdiagnosis.md Prerequisites System dependencies, OS compatibility, CA certificate setup references/prerequisites.md Output Schema Formal JSON Schema for script output references/outputschema.md Load references on demand. Do not read all reference files unless the task requires them. User Confirmation Before running any check, confirm the target domain with the user. If the user has not provided a domain, ask for it first. Never guess, derive, or scan for domains on your own. If you obtain the domain from task context rather than directly from the user, state the domain and its source explicitly before running any check. Execution Principle MANDATORY: Read-only: this skill only inspects and reports. It performs no write operations and requires no credentials of any kind. Single entry point: all checks MUST be executed through the entry script scripts/checktls.py. Do not hand-assemble diagnostic command chains. User-provided targets only: only check domains the user explicitly provides. No scanning: never scan, sweep, or probe unknown or unspecified addresses. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aliyun/alibabacloud-tls-cert-diagnosis