alibabacloud-flink-python-coding
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided business requirements and transformation logic to generate Python job files and deployment scripts, which introduces a surface for indirect prompt injection.
- Ingestion points: User requirements for Flink jobs defining sources, sinks, and processing steps, as described in references/workflows/new-job.md.
- Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore' instructions to isolate user-provided data from the agent's code generation logic.
- Capability inventory: The skill utilizes file writing (creating job.py, README.md, and build scripts), archive management (zipfile module), and command execution (pip, pyright).
- Sanitization: There is no explicit requirement to sanitize or validate user-provided strings before they are interpolated into code templates.
- [EXTERNAL_DOWNLOADS]: Fetches the ververica-flink package from the official Python Package Index (PyPI) for API source inspection and local verification.
- [COMMAND_EXECUTION]: Executes shell commands for package management (pip download, pip install), file compression (zipfile), and static analysis (pyright) to support the development workflow.
Audit Metadata