skills/aliyun/alibabacloud-aiops-skills/alibabacloud-cloudbackup-ecs-file-backup-essential-edition/Gen Agent Trust Hub
alibabacloud-cloudbackup-ecs-file-backup-essential-edition
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents how to download and install the Aliyun CLI and its HBR plugin from official Alibaba Cloud domains (aliyuncli.alicdn.com). These are trusted vendor-controlled sources.
- [COMMAND_EXECUTION]: The skill executes administrative tasks using the official Aliyun CLI tool. It includes a comprehensive security layer with regex-based validation for all user-provided parameters (such as Region IDs and Instance IDs) to prevent command injection.
- [CREDENTIALS_UNSAFE]: The skill provides excellent security guidance by explicitly forbidding the hardcoding, printing, or echoing of Access Keys (AK/SK). It directs users to use the standard 'aliyun configure' mechanism and verify status using 'aliyun configure list' without outputting sensitive data.
- [PROMPT_INJECTION]: No malicious prompt injection patterns or attempts to override system safety guidelines were detected. The skill uses instructional language focused on operational safety and 'Hard Gates' for scenario validation.
Audit Metadata