alibabacloud-oss-backup-integration-diagnosis

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches a documentation index and article excerpts from the official Alibaba Cloud help center (help.aliyun.com). These downloads target a trusted vendor domain and are used solely for providing verified configuration advice.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user queries to retrieve relevant documentation excerpts, creating a potential surface for indirect injection if the source content were malicious. 1. Ingestion points: User queries are passed via the --question parameter to scripts/oss_backup_integration_diagnosis.py. 2. Boundary markers: The skill does not use specific delimiters to wrap external documentation content, though it includes citations of the official source URLs. 3. Capability inventory: The skill has no capability to execute shell commands, perform cloud API operations, or exfiltrate data. It is restricted to diagnostic output and local file caching. 4. Sanitization: The doc lookup script implements _clean_excerpt to strip Markdown syntax, images, and links from fetched content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 04:34 PM