skills/aliyun/alibabacloud-aiops-skills/alibabacloud-dms-data-agent-platform-setup/Gen Agent Trust Hub
alibabacloud-dms-data-agent-platform-setup
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official Alibaba Cloud CLI (
aliyun) and Python SDKs (alibabacloud-tea-openapi,alibabacloud-credentials) to interact with cloud services. All network operations are directed at official vendor endpoints (e.g.,dms-enterprise.aliyuncs.com). - [SAFE]: Credential management follows industry best practices. The skill explicitly instructs users to avoid hardcoding secrets and instead utilizes the Alibaba Cloud default credential chain, which securely retrieves credentials from the environment, configuration files, or instance roles.
- [SAFE]: The Python implementation includes robust input validation in
scripts/fill_in_param_body.py. It uses regular expressions and type checking to ensure parameter integrity and implements a masking mechanism (_SENSITIVE_KEYS) to prevent sensitive data like passwords from appearing in error messages or logs. - [SAFE]: Output from the OpenAPI calls is sanitized in
scripts/openAPI_call.pyto ensure that sensitive fields (AccessKeys, Passwords, ConnectionStrings) returned by the API are redacted before being displayed to the user.
Audit Metadata