skills/aliyun/alibabacloud-aiops-skills/alibabacloud-oss-multipart-upload-diagnosis/Gen Agent Trust Hub
alibabacloud-oss-multipart-upload-diagnosis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input via the
--questionparameter, which accepts the customer's original wording. This data is used byscripts/_doc_lookup.pyto match against a documentation index for verification purposes. - Ingestion points: The
questionparameter inscripts/multipart_upload_diagnosis.pywhich is passed to thelookup_config_topicfunction inscripts/_doc_lookup.py. - Boundary markers: The skill instructions provide strict "Absolute Rules" prohibiting the execution of mutating OSS APIs and requiring the use of provided scripts for all diagnostic activities.
- Capability inventory: The skill utilizes the official
oss2Python SDK for metadata queries and thealiyunCLI for identity verification via STS. - Sanitization: Input is primarily used for keyword matching within the documentation lookup script; shell commands are executed using structured argument lists via
subprocess.runto prevent shell injection attacks. - [EXTERNAL_DOWNLOADS]: The skill fetches a documentation index (
llms.txt) and markdown excerpts fromhelp.aliyun.com. This is an official Alibaba Cloud service used to provide verified information and citations in response to customer queries. - [COMMAND_EXECUTION]: The skill invokes the official
aliyunCLI tool (specifically thealiyun sts get-caller-identitycommand) to verify the caller's identity. It also includes documentation suggesting the agent upgrade the CLI usingaliyun upgrade. These operations are performed using safe subprocess calls with argument lists.
Audit Metadata