skills/alibaba/skill-up/skill-upper/Gen Agent Trust Hub

skill-upper

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the skill-up CLI installation script from the author's official GitHub repository at github.com/alibaba/skill-up.
  • [REMOTE_CODE_EXECUTION]: The installation process for the supporting CLI tool involves piping a remote shell script from the author's GitHub repository to bash. This is the documented method for deploying the tool necessary for the skill's functionality and originates from the skill's official vendor.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process instructions, fixtures, and transcripts from other skills, creating a surface for indirect prompt injection. To mitigate this, the instructions explicitly direct the agent to treat all ingested data as untrusted content and provide specific security guidance for performing credential checks without exposing values. It also includes redaction metadata logic.
  • [DYNAMIC_EXECUTION]: The skill's evaluation test suite (evals/test_regression_scripts.py) utilizes dynamic execution and compilation to verify the effectiveness of its security-related script judges. These operations are limited to the testing environment and are not triggered during the agent's primary interaction with users.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 03:45 AM