alibabacloud-migration-db-evaluation-collector

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [PROMPT_INJECTION]: The skill includes a "Mandatory Terminology Output Rule" section that dictates the agent's output style and content. It forces the use of specific English terms, forbids translation of technical vocabulary, and mandates a specific footer for all responses to maintain a consistent output format.
  • [COMMAND_EXECUTION]: Detailed instructions are provided for running shell scripts (e.g., collect_*.sh) and SQL commands for database user management. These are intended for manual execution by the user on their own infrastructure to collect database metadata.
  • [EXTERNAL_DOWNLOADS]: The skill guides users to download a collector utility from the official Alibaba Cloud domain apds.console.aliyun.com. This is a vendor-owned resource used for the migration evaluation process.
  • [DATA_EXFILTRATION]: The skill describes a process for gathering database metadata and performance statistics, which are then uploaded to the Alibaba Cloud APDS console. This is a primary functional requirement of the database evaluation tool.
  • [PROMPT_INJECTION]: The skill processes data from external database environments, which presents a surface for indirect prompt injection.
  • Ingestion points: Source database metadata and performance statistics processed by the agent (SKILL.md, Step 2).
  • Boundary markers: The skill defines a mandatory "Security & Safety Policy" that requires explicit user confirmation before running commands or uploading data.
  • Capability inventory: The skill includes shell command execution, SQL statement execution, and instructions for network uploads via a browser console.
  • Sanitization: No specific technical sanitization or filtering of the collected database metadata is described in the provided files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:38 AM
Security Audit — agent-trust-hub — alibabacloud-migration-db-evaluation-collector