skills/aliyun/alibabacloud-aiops-skills/alibabacloud-elasticsearch-instance-manage/Gen Agent Trust Hub
alibabacloud-elasticsearch-instance-manage
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
aliyunCLI to manage cloud resources, including creating, restarting, and updating instances. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for downloading the Alibaba Cloud CLI from the vendor's official CDN (
aliyuncli.alicdn.com). These downloads are from verified vendor infrastructure. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks because it incorporates untrusted user data—such as instance passwords, VPC IDs, and configuration specifications—directly into command-line arguments and request bodies.
- Ingestion points: User-provided parameters for instance creation, querying, and updating found in
SKILL.md. - Boundary markers: The skill does not employ explicit boundary markers or delimiters around user-interpolated variables in the provided shell templates.
- Capability inventory: The skill has access to shell execution via the
aliyunCLI, allowing it to perform privileged cloud infrastructure operations. - Sanitization: There is no evidence of explicit string sanitization or escaping logic within the skill's instruction set for data provided at runtime.
Audit Metadata