alibabacloud-migration-dbm-oracle-traffic-capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Phase 3 (Step 10-11), the workflow reads first the sqla-generated WCR-derived merge.json from the capture directory and then parses/repairs it via scripts/check_merge_json.py and scripts/fix_replay_json.py, ingesting free-text SQL strings contained in merge.json that originate from WCR capture data.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill downloads and installs a required runtime tool from Alibaba OSS (https://cmh-prod-ap-southeast1.oss-ap-southeast-1.aliyuncs.com/agent/frodo/sqla-3.3.26.tar.gz) and then executes that tool (java -jar sqla.jar) as part of its parse step, so this external URL is a runtime dependency that results in executing fetched code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to perform privileged system operations (download/install software, change ownership/permissions, run package installs, create directories as the oracle user) and to produce a non-interactive runbook that assumes execution on a customer host, which pushes the agent toward modifying the machine state and potentially requiring sudo/root actions.