alibabacloud-migration-db-evaluation-collector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads data.zip uploaded by the user to Alibaba Cloud APDS for “Source DB Profiling” (Step 2: upload data.zip for analysis), which is free text/data content authored by the tenant user and can contain malicious strings that the runtime analysis/reporting LLM may ingest.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs users to download and run the Rainmeter collector from https://apds.console.aliyun.com//db/db-evaluation/collect at runtime, meaning required external binaries are fetched and executed as part of the workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating database collection user accounts (eoa_user) and running filesystem deployment commands (mkdir/tar under /opt) and collection scripts, which modify database and host state and may require privileged operations, so it pushes the agent to change the machine's state.