skills/aliyun/alibabacloud-aiops-skills/alibabacloud-dataworks-datastudio-develop/Gen Agent Trust Hub
alibabacloud-dataworks-datastudio-develop
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The SKILL.md instructions include a command to update the Aliyun CLI using
curl ... https://aliyuncli.alicdn.com/setup.sh | bash. This refers to an official installation script provided by the vendor (Aliyun) for its authorized CLI tool and is considered a safe setup procedure. - [PROMPT_INJECTION]: The automated scanner flagged instructional language intended to prevent the AI from simulating API responses or using legacy commands. These are reliability and security guardrails designed to ensure correct system interaction.
- [EXTERNAL_DOWNLOADS]: Fetches official plugins and updates from trusted Alibaba Cloud domains required for the skill's functionality.
- [COMMAND_EXECUTION]: The skill manages DataWorks resources using the aliyun CLI. It follows standard security practices by explicitly instructing the agent to never read or echo sensitive AccessKeys and to require user confirmation for all mutating operations.
Audit Metadata