alibabacloud-opc-deploy

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Alibaba Cloud CLI (aliyun) to manage cloud resources. It constructs and executes shell commands to create VPCs, ECS instances, RDS databases, and other services.\n- [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs the official Alibaba Cloud CLI from official vendor domains (aliyuncli.alicdn.com) and its public GitHub repository. These downloads are verified using SHA256 integrity checks.\n- [CREDENTIALS_UNSAFE]: While the skill manages cloud credentials, it implements rigorous safety measures. It mandates the use of RamRoleArn for temporary tokens, explicitly forbids the input or output of Access Keys/Secret Keys in the conversation, and enforces chmod 600 permissions on local credential and key files.\n- [PROMPT_INJECTION]: The skill includes several "Hard Gates" and "Iron Rules" that act as internal constraints to ensure the agent follows safety protocols, such as requiring explicit user confirmation before spending money and preventing the execution of out-of-scope tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 07:28 AM
Security Audit — agent-trust-hub — alibabacloud-opc-deploy