alibabacloud-das-agent
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the official Alibaba Cloud endpoint
das.cn-shanghai.aliyuncs.comto retrieve database diagnostics and performance analysis. - [COMMAND_EXECUTION]: Uses a Python script (
call_das_agent.py) to orchestrate API calls and process streaming responses from the DAS service. - [DATA_EXFILTRATION]: Uses the official Alibaba Cloud Credentials SDK to resolve credentials from standard local paths (e.g.,
~/.aliyun/config.json). No evidence was found of sensitive data being transmitted to unauthorized third-party domains. - [PROMPT_INJECTION]:
- Indirect Prompt Injection Analysis:
- Ingestion points: Processes user-provided natural language queries via the
--questioncommand-line argument incall_das_agent.py. - Boundary markers: The script implements a
--pipemode that encapsulates the remote service response within explicit delimiters (=== DAS AGENT RESPONSE ===) to help the calling agent distinguish tool output from instructions. - Capability inventory: Performs network requests via the
requestslibrary and reads configuration files through thealibabacloud_credentialsSDK. - Sanitization: User input is validated for length (maximum 32,000 characters), checked for type consistency, and properly URL-encoded before transmission to the API.
Audit Metadata