skills/aliyun/alibabacloud-aiops-skills/alibabacloud-migration-db-evaluation-collector/Gen Agent Trust Hub
alibabacloud-migration-db-evaluation-collector
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill includes a "Mandatory Terminology Output Rule" section that dictates the agent's output style and content. It forces the use of specific English terms, forbids translation of technical vocabulary, and mandates a specific footer for all responses to maintain a consistent output format.
- [COMMAND_EXECUTION]: Detailed instructions are provided for running shell scripts (e.g.,
collect_*.sh) and SQL commands for database user management. These are intended for manual execution by the user on their own infrastructure to collect database metadata. - [EXTERNAL_DOWNLOADS]: The skill guides users to download a collector utility from the official Alibaba Cloud domain
apds.console.aliyun.com. This is a vendor-owned resource used for the migration evaluation process. - [DATA_EXFILTRATION]: The skill describes a process for gathering database metadata and performance statistics, which are then uploaded to the Alibaba Cloud APDS console. This is a primary functional requirement of the database evaluation tool.
- [PROMPT_INJECTION]: The skill processes data from external database environments, which presents a surface for indirect prompt injection.
- Ingestion points: Source database metadata and performance statistics processed by the agent (SKILL.md, Step 2).
- Boundary markers: The skill defines a mandatory "Security & Safety Policy" that requires explicit user confirmation before running commands or uploading data.
- Capability inventory: The skill includes shell command execution, SQL statement execution, and instructions for network uploads via a browser console.
- Sanitization: No specific technical sanitization or filtering of the collected database metadata is described in the provided files.
Audit Metadata