alibabacloud-agent-observability
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Aliyun CLI by downloading a setup script from the official Alibaba Cloud CDN (
https://aliyuncli.alicdn.com/setup.sh). This is an expected operation for an Alibaba Cloud observability tool and uses the author's own official infrastructure. - [COMMAND_EXECUTION]: The skill's Python scripts (e.g.,
cms_trace.py,sls_event.py,preflight.py) execute thealiyunCLI viasubprocess.run. These calls use list-based arguments andshell=False, which prevents command injection. The commands are restricted to a read-only whitelist (get-logs,get-entity-store-data, etc.) to ensure safety. - [INDIRECT_PROMPT_INJECTION]: The skill processes external trace data and log messages which could potentially contain adversarial content. The skill implements robust defenses against this attack surface:
- It performs structural redaction using regex patterns to remove sensitive data (keys, tokens, passwords) before processing.
- The
report_render.pyscript applies script-safe JSON encoding (escaping<,>,&as\uXXXX) before injecting data into the HTML report template, preventing XSS. - It enforces a self-containment guard on generated reports, ensuring they have exactly one script block and zero external asset references.
Audit Metadata