alibabacloud-odps-maxframe-coding
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: CRITICALPROMPT_INJECTIONOBFUSCATIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The instructions in SKILL.md use aggressive prioritization language and override markers like '' to force the agent to bypass default safety protocols.
- [OBFUSCATION]: A reputation scanner confirmed malware in the documentation file references/maxframe-client-docs/reference/dataframe/generated/maxframe.dataframe.DataFrame.memory_usage.md. This indicates the file contains malicious payloads hidden within the markdown structure.
- [DATA_EXFILTRATION]: The resource DataFrame.info has been identified as a malicious blacklisted URL. This pattern suggests the domain is used for exfiltration or as a beacon for tracking agent environments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external tables and supports custom Docker image generation. These functions create an exploitable surface where malicious data can influence agent logic or compromise the build process.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata