alibabacloud-ecs-code-deploy
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python toolkit (
scripts/deploy_toolkit.py) and dynamically generated shell scripts to automate deployment tasks. These scripts are executed locally via subprocess or remotely on target ECS instances using Alibaba Cloud's official orchestration tools. - [EXTERNAL_DOWNLOADS]: The skill downloads the Alibaba Cloud CLI and various language runtimes (Node.js, Go, PHP) from official or well-known repositories. It includes security measures like HTTPS, official domains, and checksum/signature verification for Go and Composer installers.
- [DATA_EXFILTRATION]: While the skill manages cloud infrastructure, it adheres to strict security protocols (SA-2.12) that prevent the agent from soliciting or handling raw AccessKey/SecretKey pairs. It relies exclusively on the default credential chain (RAM Roles, Environment Variables) and includes masking for diagnostic outputs.
- [PROMPT_INJECTION]: The skill ingests information from user-provided project files (e.g.,
README.md) to determine deployment steps. This architectural surface for indirect prompt injection is mitigated by instructional logic requiring the agent to analyze the content and providing clear human-in-the-loop checkpoints, such as pricing confirmation and risk warnings.
Audit Metadata