skills/aliyun/alibabacloud-aiops-skills/alibabacloud-analyticdb-postgresql-knowledgebase-ops/Gen Agent Trust Hub
alibabacloud-analyticdb-postgresql-knowledgebase-ops
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or provided scripts. The skill adheres to vendor-recommended security practices.
- [EXTERNAL_DOWNLOADS]: The skill references the official Alibaba Cloud CLI from well-known vendor domains (
alicdn.com) for manual installation by the user. - [COMMAND_EXECUTION]: The skill executes legitimate
aliyunCLI commands and a bundled Python script to perform knowledge base management tasks on Alibaba Cloud. - [DATA_EXFILTRATION]: All network operations are directed at official Alibaba Cloud service endpoints. The skill explicitly prohibits printing, echoing, or hardcoding sensitive credentials and utilizes the official SDK's default credential provider chain.
- [PROMPT_INJECTION]: While the skill ingests user-provided parameters (such as instance IDs and passwords) for CLI command construction, it provides clear security guidelines. The included Python script
upload_document_local.pyperforms validation on inputs, including regex checks and path traversal mitigation for file paths.
Audit Metadata