alibabacloud-esa-pages-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Node.js scripts to execute file system operations and API calls for deployment. Scripts like deploy-folder.mjs and deploy-html.mjs read local files or directories and package them for upload to Alibaba Cloud services.
  • [EXTERNAL_DOWNLOADS]: The skill requires installation of official Alibaba Cloud packages (@alicloud/esa20240910, @alicloud/openapi-client, @alicloud/credentials, @alicloud/tea-util) and the jszip library via npm. These are standard dependencies for interacting with Alibaba Cloud APIs and handling compression.
  • [DYNAMIC_EXECUTION]: The deploy-html.mjs script dynamically generates Edge Routine code by wrapping HTML content into a JavaScript template string. This is a primary feature of the skill to enable single-page deployments to the ESA edge.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it reads local build artifacts (HTML, JS, and static assets) to deploy them.
  • Ingestion points: Files provided to deploy-html.mjs, deploy-folder.mjs, and deploy-function.mjs.
  • Boundary markers: The instructions include a 'CRITICAL BLOCKING RULE' requiring the agent to verify the existence of real artifacts and forbidding the creation of mock files.
  • Capability inventory: File system read access and network access to Alibaba Cloud OSS and ESA endpoints.
  • Sanitization: The skill performs basic escaping of backticks and dollar signs when wrapping HTML content into JavaScript templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 05:52 AM