alibabacloud-analyticdb-postgresql-knowledgebase-ops

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill contains instructions to install the Aliyun CLI by downloading and executing a shell script from https://aliyuncli.alicdn.com/setup.sh. This resource is hosted on the vendor's official content delivery network and represents a standard installation procedure for the required tooling.
  • [EXTERNAL_DOWNLOADS]: The skill specifies several Python dependencies in requirements.txt, including alibabacloud-gpdb20160503 and alibabacloud-credentials. These are official Alibaba Cloud SDK packages retrieved from standard package registries.
  • [PRIVILEGE_ESCALATION]: The CLI installation guide suggests using sudo to move the downloaded binary to a system path (/usr/local/bin/). This is a typical administrative action for system-wide software installation.
  • [INDIRECT_PROMPT_INJECTION]: The skill enables the ingestion of various document formats (PDF, Word, Markdown, etc.) into a knowledge base for RAG (Retrieval-Augmented Generation) workflows.
  • Ingestion points: Document data is ingested via upload-document-async CLI commands and the upload_document_local.py script.
  • Boundary markers: The skill does not explicitly define prompt delimiters for the retrieved context, relying on the model's instruction-following capabilities during the chat-with-knowledge-base operation.
  • Capability inventory: The skill possesses capabilities for network operations (ADBPG API calls) and local file reading via the provided Python scripts.
  • Sanitization: The skill assumes document parsing and vectorization are handled securely by the AnalyticDB service.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 02:47 PM