alibabacloud-bailian-videoanalysis
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill is an official vendor implementation designed for video comprehension.
- [COMMAND_EXECUTION]: The scripts
list_workspace.py,check_env.py, andquanmiao_upload_file_to_oss_and_get_file_url.pyutilizesubprocess.runto interact with system tools and the Aliyun CLI. These implementations use argument lists rather than shell strings, which effectively mitigates command injection risks. - [CREDENTIALS_UNSAFE]: Credential management follows industry best practices. The skill relies on the standard Alibaba Cloud default credential chain and incorporates explicit programmatic checks and instructional warnings to prevent the accidental exposure or manual entry of AccessKey IDs and SecretKeys.
- [EXTERNAL_DOWNLOADS]: All Python dependencies identified in the skill are official, versioned packages from the Alibaba Cloud organization, hosted on the standard public registry (PyPI).
- [PROMPT_INJECTION]: The skill processes external video content for analysis; however, it lacks instructions that would allow for bypassing safety filters or overriding the agent's core behavioral constraints.
Audit Metadata