alibabacloud-opc-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Alibaba Cloud CLI (
aliyun) to manage cloud resources. It constructs and executes shell commands to create VPCs, ECS instances, RDS databases, and other services.\n- [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs the official Alibaba Cloud CLI from official vendor domains (aliyuncli.alicdn.com) and its public GitHub repository. These downloads are verified using SHA256 integrity checks.\n- [CREDENTIALS_UNSAFE]: While the skill manages cloud credentials, it implements rigorous safety measures. It mandates the use ofRamRoleArnfor temporary tokens, explicitly forbids the input or output of Access Keys/Secret Keys in the conversation, and enforceschmod 600permissions on local credential and key files.\n- [PROMPT_INJECTION]: The skill includes several "Hard Gates" and "Iron Rules" that act as internal constraints to ensure the agent follows safety protocols, such as requiring explicit user confirmation before spending money and preventing the execution of out-of-scope tasks.
Audit Metadata