alibabacloud-bailian-videoanalysis
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Alibaba Cloud CLI and custom Python scripts to interact with cloud services. These operations are limited to environment verification, workspace management, and authenticated OSS operations using the user's local credential chain.\n- [EXTERNAL_DOWNLOADS]: Installs official Alibaba Cloud Python SDKs from standard registries as defined in the requirements file. These are verified vendor-authored dependencies necessary for API interaction.\n- [DATA_EXFILTRATION]: Transfers video data to the user's Alibaba Cloud OSS buckets to enable processing by the video analysis service. This is the core functionality of the skill and is implemented using secure, temporary pre-signed URLs to grant the service restricted access.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from video transcripts and visual descriptions returned by the Bailian API.\n
- Ingestion points: API response payloads processed in
scripts/quanmiao_get_videoAnalysis_task_result.py.\n - Boundary markers: Not explicitly implemented in scripts; the agent handles raw JSON outputs.\n
- Capability inventory: The skill can execute cloud CLI commands and perform network API calls through the SDK in
scripts/quanmiao_submit_videoAnalysis_task.py.\n - Sanitization: Present; parameters such as
workspace_idandfile_urlare validated via regular expressions and prefix checks in the Python scripts to prevent common injection attacks.
Audit Metadata