yunxiao-requirement-lifecycle
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by implementing mandatory validation steps and providing scripts to audit configurations before applying changes. It includes explicit instructions to avoid recording sensitive credentials such as tokens or private keys.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (
scripts/profile_tool.pyandscripts/oneos_profile_tool.py) to validate and render project profiles. These scripts use standard Python libraries, do not perform network operations, and contain functions specifically designed to scan for and block sensitive strings (e.g., 'password', 'token', 'secret'). - [DATA_EXFILTRATION]: Configuration files in the
assets/directory contain platform-specific identifiers (Space IDs, User IDs) for Alibaba Cloud Projex. These are necessary for routing API requests and do not constitute sensitive credentials or private data. All network communication is directed to the official Alibaba Cloud domain (devops.aliyun.com).
Audit Metadata