alibabacloud-oss-endpoint-internal-diagnosis

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input via the --question parameter and fetches external documentation from the Alibaba Cloud help portal to assist in diagnostics. This data is interpolated into the agent's context, creating a potential surface for indirect prompt injection.
  • Ingestion points: User-supplied symptom descriptions in oss_endpoint_diagnosis.py and external documentation content fetched in _doc_lookup.py.
  • Boundary markers: The skill defines a 'Final Answer Contract' and 'Absolute Rules' in SKILL.md that instruct the agent on how to interpret script output and structure its final response.
  • Capability inventory: The skill utilizes the oss2 SDK for cloud API calls, executes the aliyun CLI for identity verification, and performs DNS resolution probes.
  • Sanitization: The _doc_lookup.py script employs regular expressions to clean Markdown content (removing images, links, and HTML tags) and truncates excerpts to 500 characters to limit the amount of external data processed.
  • [COMMAND_EXECUTION]: The script _oss_client.py invokes the aliyun command-line interface to perform an identity pre-check using subprocess.run with a defined argument list.
  • [EXTERNAL_DOWNLOADS]: The skill fetches configuration and documentation data from help.aliyun.com to provide verified technical guidance. This involves downloading an index file and specific documentation pages at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:07 AM