alibabacloud-dataworks-data-ops
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill incorporates explicit security rules that prohibit reading, printing, or requesting sensitive authentication credentials like Access Keys and Secret Keys. It correctly advises the use of configuration profiles and environment variables for authentication, which is a standard and secure practice.\n- [COMMAND_EXECUTION]: The skill uses the official
aliyunCLI to interact with cloud service APIs. These commands are necessary for the primary function of monitoring and managing DataWorks task instances and workflows.\n- [EXTERNAL_DOWNLOADS]: The installation guide references official Alibaba Cloud CDN URLs (aliyuncli.alicdn.com) for downloading the CLI binary. These sources are official vendor infrastructure and are used for standard setup procedures.\n- [PROMPT_INJECTION]: The skill processes task instance logs, which could theoretically contain malicious content (Indirect Prompt Injection). Evidence: Ingestion points includeget-task-instance-logresponse; capability inventory includesaliyunCLI shell commands; boundary markers and sanitization are not explicitly defined in the provided instructions.
Audit Metadata