skills/aliyun/alibabacloud-aiops-skills/alibabacloud-analyticdb-postgresql-supabase-ops/Gen Agent Trust Hub
alibabacloud-analyticdb-postgresql-supabase-ops
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the Aliyun CLI using
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash. This script is hosted on an official Alibaba Cloud CDN domain (alicdn.com) and serves as the standard, vendor-provided installation method for their CLI tools. - [CREDENTIALS_UNSAFE]: The skill includes explicit security rules that prevent the agent from requesting, printing, or echoing sensitive Access Keys or Secrets. It directs users to manage credentials through official, external configuration methods and only uses non-sensitive status checks like
aliyun configure listto verify authentication. - [COMMAND_EXECUTION]: The skill executes official
aliyunCLI commands for cloud resource management. A robust safety mechanism is in place requiring explicit user confirmation before any mutating operation (such ascreate,pause, orreset-password) is executed. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from cloud API responses, which could theoretically contain malicious instructions. However, this risk is mitigated by the workflow's requirement for manual user approval of all significant actions derived from that data.
Audit Metadata