Skills
Navigate
skills/aliyun/alibabacloud-aiops-skills/alibabacloud-ak-leak-incident-response/Gen Agent Trust Hub

alibabacloud-ak-leak-incident-response

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes aliyun CLI commands and pip via subprocess.run to interact with Alibaba Cloud APIs and manage dependencies.
  • [CREDENTIALS_UNSAFE]: The skill reads Alibaba Cloud credentials from the standard local configuration file ~/.aliyun/config.json to authenticate its diagnostic requests.
  • [EXTERNAL_DOWNLOADS]: The skill can optionally download and install the requests library from the official Python Package Index (PyPI) if the functionality is enabled via environment variables.
  • [DYNAMIC_EXECUTION]: The skill implements a runtime dependency check that performs a pip install of the requests package if it is not found in the environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes event logs from ActionTrail. While it performs masking of identifiers, the textual content of logs could theoretically be manipulated by an attacker to attempt an indirect prompt injection during report generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 01:54 AM