alibabacloud-maxcompute-migration-service

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill mandates the redaction of sensitive credentials (passwords, tokens, AccessKey IDs) from API responses using jq filters before they are processed or displayed, ensuring no plaintext secrets are written to disk or shown to the user.
  • [SAFE]: External downloads for the Aliyun CLI provided in the installation guide are sourced exclusively from official vendor domains (alicdn.com) which are trusted resources belonging to the skill author.
  • [SAFE]: The skill implements a 'Confirmation First' principle, requiring explicit user approval before executing state-changing operations like creating, stopping, or deleting migration jobs.
  • [SAFE]: Instructions for credential management correctly direct the user to perform configuration outside the AI session and strictly forbid the input or display of literal Access Keys during the conversation.
  • [SAFE]: The skill uses a specific, identifiable User-Agent for all CLI commands, which is a best practice for auditing agent actions on cloud infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 11:50 AM