alibabacloud-dataworks-infra-manage
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Alibaba Cloud CLI (
aliyun-cli) and thejqutility from official vendor domains (aliyuncli.alicdn.com). These are well-known, trusted sources associated with the skill's author ('aliyun'). - [COMMAND_EXECUTION]: The skill executes
aliyunCLI commands to manage DataWorks resources. It includes specific security restrictions that disable potentially destructive operations such asDeleteDataSourceandUpdateComputeResourceto prevent accidental data loss or service interruption. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided JSON for data source and compute resource configurations. It mitigates injection risks by requiring mandatory parameter confirmation gates and explicit user approval before executing any write operations.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. The skill uses standard security practices for managing cloud credentials, such as checking configuration status without printing sensitive keys and using placeholders for passwords in examples.
Audit Metadata