alibabacloud-maxcompute-cli
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of the
aliyun maxccommand-line tool to perform MaxCompute operations, including queries, metadata discovery, authentication, and data transfers. It uses local shell commands likepython3 -cto parse JSON andopensslto generate session identifiers. It also supports an external authentication helper through the--process-commandflag. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from MaxCompute query results and table metadata. Ingestion points: Data enters the agent context via
queryresults,data sample, anddata profileoutputs. Boundary markers: The skill does not define specific delimiters to isolate untrusted database content from instructions. Capability inventory: The agent can perform file writes, data uploads, and execute DML/DDL statements. Sanitization: No specific sanitization or escaping protocols are described for database content before it is interpolated into agent reasoning.
Audit Metadata