alibabacloud-flink-python-coding
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security model for credential management. It explicitly forbids hardcoding secrets and instructs the agent to use Alibaba Cloud's native variable management system through entry-point arguments.
- [SAFE]: External dependencies and URLs are restricted to official vendor domains (aliyun.com) and well-known container registries (quay.io), which are used for standard building of compatible Python environments.
- [SAFE]: Local command execution for packaging and dependency building (via pip, bash, and docker) is scoped to artifact preparation. The skill includes mandatory syntax checks (bash -n) and integrity verification for generated scripts before they are utilized.
- [SAFE]: The skill maintains a clear boundary between local development and cloud operations, requiring separate user authorization for any network-based deployment or Alibaba Cloud API interaction.
Audit Metadata