alibabacloud-dms-skill
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes a setup script from Alibaba Cloud's official CDN (aliyuncli.alicdn.com) to install the necessary CLI tools. This is a vendor-authorized installation method for the required environment.
- [COMMAND_EXECUTION]: The skill executes shell scripts that wrap the Aliyun CLI for core database operations. These scripts include robust validation logic for user-provided parameters like database IDs and search keywords, and use array-based argument passing to minimize shell injection risk.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied SQL queries, creating a surface for potential injection. Ingestion points: The
sqlparameter inexecute_query.shand thekeywordparameter insearch_database.sh. Boundary markers: Not explicitly present in instructions, but logic is enforced via shell scripts. Capability inventory: Executing SQL scripts and network API calls via the Aliyun CLI. Sanitization: Validation regex for keywords, numeric checks for database IDs, a blocklist for destructive DDL (DROP, TRUNCATE, ALTER, RENAME), and a mandatory--forceflag for DML operations (INSERT, UPDATE, DELETE). - [EXTERNAL_DOWNLOADS]: Fetches CLI plugins and updates from Alibaba Cloud's official repositories to maintain tool functionality and compatibility.
Audit Metadata