alibabacloud-dts-task-manager

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the official aliyun command-line interface to interact with cloud infrastructure. It performs local environment checks (which aliyun, aliyun configure list) and executes API calls for DTS task management.
  • [SAFE]: The skill implements strict 'Sensitive Information' rules in SKILL.md, requiring that passwords, AccessKey Secrets, and certificates are never displayed in plaintext and are masked with ****** in all outputs.
  • [SAFE]: Includes a dedicated 'Input Validation and Injection Prevention' section that mandates regex validation for all user-provided parameters (IPs, ports, IDs, names) and requires single-quoting of values to prevent shell injection attacks.
  • [SAFE]: Provides a 'RAM Permission Configuration' reference (references/ram-policies.md) that guides users toward least-privilege access control for their cloud environment.
  • [EXTERNAL_DOWNLOADS]: References the official GitHub repository for the Alibaba Cloud CLI (github.com/aliyun/aliyun-cli) for installation, which is a trusted vendor resource.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:04 PM