skills/aliyun/alibabacloud-aiops-skills/alibabacloud-ebs-disk-snapshot-management/Gen Agent Trust Hub
alibabacloud-ebs-disk-snapshot-management
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The CLI installation guide references a setup script hosted on the vendor's official content delivery network (alicdn.com).
- [REMOTE_CODE_EXECUTION]: The documentation contains a pattern for downloading and executing an installation script (curl | bash). However, the skill instructions explicitly state that the agent does not execute installation commands itself.
- [DATA_EXFILTRATION]: The skill uses the safe diagnostic command 'aliyun configure list' to verify credentials and contains strict prohibitions against requesting or displaying secret access keys.
- [PROMPT_INJECTION]: The skill processes external snapshot metadata which could contain embedded instructions. This risk is addressed by strict ingestion points (DescribeSnapshots), clear boundary markers in the operation scope, a limited capability inventory restricted to non-destructive tasks, and explicit parameter sanitization.
Audit Metadata