alibabacloud-oss-manage-metaquery
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements robust security practices for Alibaba Cloud service integration.
- [SAFE]: Credential management is handled securely via the official
alibabacloud-credentialsprovider, which utilizes the system's default credential chain. The instructions strictly prohibit manual handling or printing of AccessKey and SecretKey values. - [COMMAND_EXECUTION]: Employs the official Aliyun CLI (
aliyun ossutil) for bucket management. It includes a mandatory 'Dangerous Operation Confirmation' protocol that requires explicit user consent before executing destructive actions such as deleting buckets, objects, or closing metadata indexes. - [EXTERNAL_DOWNLOADS]: Includes instructions to download the official Aliyun CLI and ossutil binaries from trusted vendor domains (
alicdn.comandgosspublic.alicdn.com). These are documented as necessary prerequisites for the skill's functionality. - [SAFE]: Python scripts responsible for querying (e.g.,
semantic_query.pyandopen_metaquery.py) utilizexml.sax.saxutils.escapeto sanitize user-provided inputs before they are interpolated into XML request bodies, preventing potential injection vulnerabilities during API interactions.
Audit Metadata