skills/aliyun/alibabacloud-aiops-skills/alibabacloud-oss-endpoint-internal-diagnosis/Gen Agent Trust Hub
alibabacloud-oss-endpoint-internal-diagnosis
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input via the
--questionparameter and fetches external documentation from the Alibaba Cloud help portal to assist in diagnostics. This data is interpolated into the agent's context, creating a potential surface for indirect prompt injection. - Ingestion points: User-supplied symptom descriptions in
oss_endpoint_diagnosis.pyand external documentation content fetched in_doc_lookup.py. - Boundary markers: The skill defines a 'Final Answer Contract' and 'Absolute Rules' in
SKILL.mdthat instruct the agent on how to interpret script output and structure its final response. - Capability inventory: The skill utilizes the
oss2SDK for cloud API calls, executes thealiyunCLI for identity verification, and performs DNS resolution probes. - Sanitization: The
_doc_lookup.pyscript employs regular expressions to clean Markdown content (removing images, links, and HTML tags) and truncates excerpts to 500 characters to limit the amount of external data processed. - [COMMAND_EXECUTION]: The script
_oss_client.pyinvokes thealiyuncommand-line interface to perform an identity pre-check usingsubprocess.runwith a defined argument list. - [EXTERNAL_DOWNLOADS]: The skill fetches configuration and documentation data from
help.aliyun.comto provide verified technical guidance. This involves downloading an index file and specific documentation pages at runtime.
Audit Metadata