alibabacloud-dataworks-data-ops

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill incorporates explicit security rules that prohibit reading, printing, or requesting sensitive authentication credentials like Access Keys and Secret Keys. It correctly advises the use of configuration profiles and environment variables for authentication, which is a standard and secure practice.\n- [COMMAND_EXECUTION]: The skill uses the official aliyun CLI to interact with cloud service APIs. These commands are necessary for the primary function of monitoring and managing DataWorks task instances and workflows.\n- [EXTERNAL_DOWNLOADS]: The installation guide references official Alibaba Cloud CDN URLs (aliyuncli.alicdn.com) for downloading the CLI binary. These sources are official vendor infrastructure and are used for standard setup procedures.\n- [PROMPT_INJECTION]: The skill processes task instance logs, which could theoretically contain malicious content (Indirect Prompt Injection). Evidence: Ingestion points include get-task-instance-log response; capability inventory includes aliyun CLI shell commands; boundary markers and sanitization are not explicitly defined in the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 05:52 AM