alibabacloud-odps-cost-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Alibaba Cloud CLI and its setup script from official vendor domains such as aliyuncli.alicdn.com. These are identified as legitimate vendor resources for tool installation.
- [REMOTE_CODE_EXECUTION]: A command is included to pipe a setup script to bash (curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash) for installing or updating the CLI tool. This originates from a vendor-owned CDN and represents standard maintenance operations for the required environment.
- [COMMAND_EXECUTION]: The skill executes various aliyun maxcompute CLI commands to retrieve billing and usage metrics. It enforces strict constraints including the use of specific APIs, user-agent strings, and region verification to ensure authorized tool usage.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided parameters like RegionId and timestamps which are interpolated into shell commands. Ingestion points: User-provided values for region and time range collected in SKILL.md. Boundary markers: The skill instructs the agent to ask for parameters but does not use explicit data delimiters. Capability inventory: Execution of aliyun CLI commands via subprocess calls. Sanitization: Includes instructions to validate timestamp formats and restrict query time ranges.
Audit Metadata