alibabacloud-opc-advisor
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes official
aliyunCLI calls (e.g.,ecs:DescribePrice,rds:DescribePrice) for retrieving real-time pricing and validating system images. These operations are strictly read-only and performed against the vendor's own API to support the advisor's core functionality. - [PROMPT_INJECTION]: The skill incorporates a robust 'Iron Rules' framework and a state-machine interaction flow that requires explicit user confirmation for high-stakes fields. It includes logic to detect and decline out-of-scope requests, such as enterprise-scale traffic or GPU requirements, preventing manipulation of its advisory logic.
- [EXTERNAL_DOWNLOADS]: The advisor provides links to official Alibaba Cloud domains including
aliyun.com,aliyunpds.com, andopc.aliyun.comfor purchase and console management. These resources trace directly back to the verified vendor's infrastructure. - [DATA_EXPOSURE_EXFILTRATION]: No sensitive local data paths or hardcoded credentials were detected. The skill specifically instructs users to use temporary RAM role credentials rather than permanent AccessKeys, aligning with cloud security best practices.
Audit Metadata