alibabacloud-dts-doc-parse
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the
dtscliutility by executing remote Bash and PowerShell scripts from Alibaba Cloud's official storage service (aliyun-dts-cli.oss-cn-hangzhou.aliyuncs.com). This follows the vendor's official installation procedure for the required tool. - [EXTERNAL_DOWNLOADS]: The skill fetches the
dtsclibinary and subsequent skill updates from the vendor's official Object Storage Service (OSS) infrastructure. - [COMMAND_EXECUTION]: The skill invokes the
dtscliutility for various operational tasks, including authentication setup, environment health checks, version management, and the core document parsing workflow. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill is designed to parse local PDF, Word, PowerPoint, and image files (JPEG, JPG, PNG) into Markdown text.
- Boundary markers: The parsing process automatically inserts
---delimiters to separate individual pages in the generated Markdown output. - Capability inventory: The skill uses the
dtsclitool to upload document data to Alibaba Cloud for processing and writes the resulting Markdown back to the local filesystem. - Sanitization: The command-line utility normalizes the document content by converting HTML tables to GFM and removing certain nested HTML tags, though the underlying content remains untrusted.
Audit Metadata