alibabacloud-bailian-rag-knowledgebase
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/api_key.pyinteracts with the officialaliyunCLI tool to automate workspace queries and key management. All subprocess invocations pass arguments as structured arrays rather than raw shell strings, preventing command injection vulnerabilities. - [CREDENTIALS_UNSAFE]: The skill implements strong secrets management. It retrieves configuration details from standard paths (
~/.aliyun/config.json) and environment variables. When writing configuration files locally, it properly sets restricted file permissions (0o600). - [EXTERNAL_DOWNLOADS]: Dependencies declared in
requirements.txttarget well-known public libraries (dashscopeandrequests), with no suspicious third-party sources or untrusted package references.
Audit Metadata