alibabacloud-cms-manage
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
aliyun cms2CLI to perform monitoring operations andkubectlto manage Kubernetes workloads. It includes explicit rules for human confirmation before executing any command that modifies cloud state. - [EXTERNAL_DOWNLOADS]: The skill references official Alibaba Cloud download sources for monitoring agents and utilizes standard package managers for vendor-supported SDKs. All sources are within the official vendor infrastructure.
- [PRIVILEGE_ESCALATION]: The skill manages high-privilege operations such as cluster addon installation and deployment patching. These are core functionalities of the skill and are protected by a mandatory Two-Phase Execution Protocol.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from cloud resource queries to drive automated workflows. It implements multiple security gates (Region, Workspace, and Resource Identity) and validation steps to ensure actions are performed on intended resources.
Audit Metadata