alibabacloud-dataworks-workspace-manage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the official installation method for the Aliyun CLI, which involves piping a shell script to bash. The script is hosted on the vendor's official content delivery network (aliyuncli.alicdn.com).
- [EXTERNAL_DOWNLOADS]: Fetches CLI installation scripts and binary packages from Alibaba Cloud's official CDN and GitHub repositories.
- [COMMAND_EXECUTION]: Employs the aliyun command-line interface to perform resource management tasks within Alibaba Cloud DataWorks.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied parameters to construct and execute cloud management commands.
- Ingestion points: User input parameters such as workspace names, display names, and user IDs in SKILL.md.
- Boundary markers: Includes a mandatory parameter confirmation step requiring the agent to verify all inputs with the user before execution.
- Capability inventory: Execution of shell commands via the aliyun CLI for project and member management.
- Sanitization: Relies on manual user verification of the generated commands before they are run.
- [PRIVILEGE_ESCALATION]: The installation guide includes instructions to use sudo for moving the CLI binary to a system path (/usr/local/bin/), which is standard procedure for installing system-wide command-line utilities.
Audit Metadata