alibabacloud-oss-ossfs-mount-diagnosis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the Alibaba Cloud CLI tool (
aliyun) usingsubprocess.runinscripts/_oss_client.pyfor identity verification. The implementation uses a fixed argument list and redirects stdin tosubprocess.DEVNULL, which is a secure method for calling external binaries.\n- [COMMAND_EXECUTION]: TheSKILL.mdinstructions guide the agent to verify and potentially upgrade thealiyunCLI using theupgrade --yescommand. This is a standard management action for vendor-provided tooling and ensures compatibility for identity checks.\n- [EXTERNAL_DOWNLOADS]: The skill downloads documentation metadata and content from the official Alibaba Cloud help center (help.aliyun.com) throughscripts/_doc_lookup.py. These operations are limited to the vendor's own official infrastructure and are used to provide verified guidance.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-supplied symptoms and questions, as well as external documentation content, constituting a vulnerability surface that is well-mitigated by strict operational constraints.\n - Ingestion points: User inputs for the
--symptomand--questionparameters and external markdown content retrieved fromhelp.aliyun.com.\n - Boundary markers: The skill defines "Absolute Rules" in
SKILL.mdto prohibit all non-read-only actions and uses structured JSON output to ensure deterministic behavior.\n - Capability inventory: The skill can execute the
aliyunCLI for identity verification and issue read-only metadata queries (e.g.,GetBucketInfo,ListBuckets) to the OSS control plane.\n - Sanitization: External documentation content is programmatically cleaned of markdown syntax and truncated in
scripts/_doc_lookup.pybefore being used.
Audit Metadata