multi-account-query
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's primary function is to facilitate multi-account management within an Alibaba Cloud Resource Directory. It follows documented cloud provider patterns for cross-account access via assumed roles.
- [COMMAND_EXECUTION]: The skill invokes the
AlibabaCloud___CallCLItool to list accounts and query resources. This execution is limited to the Alibaba Cloud CLI environment and is triggered by specific administrative needs. - [SAFE]: An indirect prompt injection surface is present as the skill processes account metadata from the
list-accountsAPI response. - Ingestion point:
list-accountsoutput as described in Step 2 of the workflow inSKILL.md. - Boundary markers: Not explicitly defined in the skill logic for the processing of API data.
- Capability inventory:
AlibabaCloud___CallCLIis the primary tool used for command execution across accounts. - Sanitization: No explicit filtering of account display names is performed before alias matching, though the security risk is negligible within the context of a managed Resource Directory.
Audit Metadata