skills/aliyun/alibabacloud-aiops-skills/alibabacloud-analyticdb-postgresql-knowledgebase-ops/Gen Agent Trust Hub
alibabacloud-analyticdb-postgresql-knowledgebase-ops
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions to install the Aliyun CLI by downloading and executing a shell script from
https://aliyuncli.alicdn.com/setup.sh. This resource is hosted on the vendor's official content delivery network and represents a standard installation procedure for the required tooling. - [EXTERNAL_DOWNLOADS]: The skill specifies several Python dependencies in
requirements.txt, includingalibabacloud-gpdb20160503andalibabacloud-credentials. These are official Alibaba Cloud SDK packages retrieved from standard package registries. - [PRIVILEGE_ESCALATION]: The CLI installation guide suggests using
sudoto move the downloaded binary to a system path (/usr/local/bin/). This is a typical administrative action for system-wide software installation. - [INDIRECT_PROMPT_INJECTION]: The skill enables the ingestion of various document formats (PDF, Word, Markdown, etc.) into a knowledge base for RAG (Retrieval-Augmented Generation) workflows.
- Ingestion points: Document data is ingested via
upload-document-asyncCLI commands and theupload_document_local.pyscript. - Boundary markers: The skill does not explicitly define prompt delimiters for the retrieved context, relying on the model's instruction-following capabilities during the
chat-with-knowledge-baseoperation. - Capability inventory: The skill possesses capabilities for network operations (ADBPG API calls) and local file reading via the provided Python scripts.
- Sanitization: The skill assumes document parsing and vectorization are handled securely by the AnalyticDB service.
Audit Metadata