alibabacloud-flink-instance-manage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing a local Python wrapper script (
scripts/instance_ops.py) which interfaces with the Alibaba Cloud SDK. This design centralizes logic and enforces operational boundaries. - [EXTERNAL_DOWNLOADS]: Documentation in
references/cli-installation-guide.mdprovides instructions for downloading the Aliyun CLI fromaliyuncli.alicdn.com. These are legitimate vendor-provided resources from Alibaba Cloud's content delivery network. - [CREDENTIALS_SAFE]: The skill correctly implements the Alibaba Cloud default credential chain via
alibabacloud-credentials, which allows it to leverage existing local profiles or environment variables without requiring the agent to handle or store sensitive Access Keys directly. - [SAFETY_CONTROLS]: The Python script and the accompanying instructions enforce a mandatory
--confirmflag for any cost-incurring or resource-consuming operations (create,create_namespace), acting as an effective safety gate against accidental resource allocation.
Audit Metadata