alibabacloud-esa-pages-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Node.js scripts to execute file system operations and API calls for deployment. Scripts like
deploy-folder.mjsanddeploy-html.mjsread local files or directories and package them for upload to Alibaba Cloud services. - [EXTERNAL_DOWNLOADS]: The skill requires installation of official Alibaba Cloud packages (
@alicloud/esa20240910,@alicloud/openapi-client,@alicloud/credentials,@alicloud/tea-util) and thejsziplibrary via npm. These are standard dependencies for interacting with Alibaba Cloud APIs and handling compression. - [DYNAMIC_EXECUTION]: The
deploy-html.mjsscript dynamically generates Edge Routine code by wrapping HTML content into a JavaScript template string. This is a primary feature of the skill to enable single-page deployments to the ESA edge. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it reads local build artifacts (HTML, JS, and static assets) to deploy them.
- Ingestion points: Files provided to
deploy-html.mjs,deploy-folder.mjs, anddeploy-function.mjs. - Boundary markers: The instructions include a 'CRITICAL BLOCKING RULE' requiring the agent to verify the existence of real artifacts and forbidding the creation of mock files.
- Capability inventory: File system read access and network access to Alibaba Cloud OSS and ESA endpoints.
- Sanitization: The skill performs basic escaping of backticks and dollar signs when wrapping HTML content into JavaScript templates.
Audit Metadata