alibabacloud-planning
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a feature to visualize cloud architecture by starting a local Python webserver. The implementation uses
python3 -m http.serverbound to127.0.0.1, which correctly limits network exposure to the local loopback interface and is standard for development previews. - [INDIRECT_PROMPT_INJECTION]: The skill reads existing configuration and design files from the project workspace during modification tasks. This represents a potential surface for indirect prompt injection if an attacker were to modify these local files. This surface is documented as a risk inherent to infrastructure-as-code management tools.
- Ingestion points:
.aliyun-ai-ops-spec/{name}/designs/design.mdand related.tffiles in SKILL.md. - Boundary markers: No specific delimiters are used for the loaded design content.
- Capability inventory: Includes cloud resource management via
aliyun-cli, file system operations, and shell command execution. - Sanitization: The instructions guide the agent to analyze and summarize the loaded data before continuing the conversation, enabling user oversight.
Audit Metadata