tencent cloud

APIs

DocumentationAPIsCloud Security CenterSkill Security Detection APIsDescribeSkillScanAlertDetail

DescribeSkillScanAlertDetail

Download
Focus Mode
Font Size
Last updated: 2026-09-01 10:18:52

1. API Description

Domain name for API request: csip.intl.tencentcloudapi.com.

This API is used to query Skill security detection alarm details, including local alarm information and engine real-time detection data.

A maximum of 20 requests can be initiated per second for this API.

We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name Required Type Description
Action Yes String Common Params. The value used for this API: DescribeSkillScanAlertDetail.
Version Yes String Common Params. The value used for this API: 2022-11-21.
Region No String Common Params. This parameter is not required.
ID Yes Integer

Alarm record ID
For reference on obtaining the value: obtain through the DescribeSkillScanAlertList API
MemberId.N No Array of String Group account member id

3. Output Parameters

Parameter Name Type Description
ID Integer

Alarm record ID
AppID Integer

Tenant AppID
UUID String

Host UUID
HostIP String

Host IP address
InstanceID String

Instance ID
Parameter format: such as ins-xxxxxxxx
InstanceName String

Instance name.
BelongAssetType String

Asset type affiliation
Enumeration values:
HOST: Host
CONTAINER: Container
SkillName String

Skill name
SkillPath String

Skill file path
Scope String

Skill application scope
Version String

Skill version number
ContentHash String

SHA256 hash of file content
Parameter format: sha256:<64-digit hex>
RiskLevel String

Risk level
Enumeration values:
malicious: Malicious
suspicious: Suspicious
SecurityScore Integer

Security score
Value range: [0, 100]
PrimaryRuleID String

Main matched rule ID
EngineVersion Integer

Detection engine version number
Status Integer

Processing status
Enumeration values:
0: unprocessed
1: processed
2: ignored
3: trusted
Level String

Alarm level
Enumeration values:
high: High risk
medium: Medium risk
CreateTime Timestamp ISO8601

First detection time
Parameter format: YYYY-MM-DDTHH:mm:ssZ (ISO8601 format)
SkillDescription String

Skill feature description (engine real-time query return)
RiskDescription String

Comprehensive risk abstract summarizing the primary risks/attack chains identified in this detection (query in real time via engine). Returns copywriting in English when Language=en-US is passed.
Mitigation String

Handling suggestions (real-time query by engine)
CapabilityTags Array of SkillCapabilityTag

Skill capacity tag list (returned by engine real-time query)
RuleCatalog Array of SkillRuleCatalogItem

Fusion rule directory list (returned by engine query in real time)
ScanItems Array of SkillScanEngineResult

Scan result details list (returned by engine query in real time)
ReportURL String

Detection report link (returned by real-time query from the engine)
ScannedAt String

Scan complete time (returned by the engine in real-time query)
Parameter format: ISO8601 format
RequestId String The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem.

4. Example

Example1 Querying alert details

Input Example

POST / HTTP/1.1
Host: csip.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeSkillScanAlertDetail
<Common request parameters>

{
    "ID": 10001
}

Output Example

{
    "Response": {
        "ID": 10001,
        "UUID": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
        "HostIP": "10.0.1.100",
        "InstanceID": "ins-a1b2c3d4",
        "ContainerID": "",
        "BelongAssetType": "HOST",
        "SkillName": "code-review-assistant",
        "SkillPath": "/home/user/.local/share/skills/code-review-assistant",
        "Scope": "user",
        "Version": "1.2.3",
        "ContentHash": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "RiskLevel": "malicious",
        "SecurityScore": 35,
        "PrimaryRuleID": "90001",
        "EngineVersion": 3,
        "Status": 0,
        "Level": "high",
        "CreateTime": "2026-06-20T10:30:00Z",
"SkillDescription": "This Skill has file read/write and network access capabilities"
"Mitigation": "We recommend that you immediately disable the Skill and review its execution history",
        "CapabilityTags": [
            {
                "ID": "file_access",
"Name": "File access"
            }
        ],
        "RuleCatalog": [
            {
                "RuleID": "90001",
"RuleName": "Code injection risk"
            }
        ],
        "ScanItems": [
            {
                "ScanType": "AI",
                "RuleList": [
                    {
                        "RuleID": "90001",
"Description": "Suspicious code execution logic detected"
                    }
                ]
            }
        ],
        "ReportURL": "https://skillscan.example.com/reports/abc123",
        "ScannedAt": "2026-06-20T10:28:00Z",
        "RequestId": "c368eae2-8739-4cc2-b4f8-8f4284a93b41"
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

6. Error Code

There is no error code related to the API business logic. For other error codes, please see Common Error Codes.

Previous Topic: DescribeClusterInstallCommandNext Topic: DescribeSkillScanAlertList

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback