alibabacloud-help-doc-search
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill makes network requests exclusively to Alibaba Cloud's official domains (
aliyun.com,t.aliyun.com) to retrieve documentation and API metadata. It implements a local caching mechanism in~/.cache/aliyun-help-search/to store non-sensitive product indexes and search category mappings. No sensitive system files or credentials are accessed. - [INDIRECT_PROMPT_INJECTION]: The skill acts as an ingestion point for external documentation content. It mitigates associated risks by providing structured cleaning of HTML content and instructing the agent to verify claims against authoritative metadata and provide source URLs for user review.
- [COMMAND_EXECUTION]: All operations are handled by a Python script using only the standard library. The script does not execute external binaries or shell commands based on user input.
Audit Metadata