alibabacloud-pai-dlc-job-diagnostics
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and analyzes untrusted external data from pod logs and system events during job diagnostics. This data is produced in external training environments and could potentially contain malicious instructions intended to manipulate the agent's reasoning.\n
- Ingestion points: The
get-pod-logsandget-job-eventscommands inSKILL.mdfetch logs and events from the distributed training environment.\n - Boundary markers: The skill instructions do not specify any delimiters or safety prompts to isolate untrusted log data from agent instructions.\n
- Capability inventory: The skill leverages the Aliyun CLI to perform various read operations and environment configurations.\n
- Sanitization: There is no evidence of filtering or sanitization of the retrieved logs before the agent processes them.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the Aliyun CLI binary and associated plugins from official vendor sources.\n
- CLI binaries are downloaded from the official vendor CDN at
aliyuncli.alicdn.com(referenced inreferences/cli-installation-guide.md).\n - Official plugins such as
aliyun-cli-paistudioare installed via the Aliyun CLI plugin manager.\n - The skill suggests the use of
npxto add official diagnostic tools from the vendor's skill repository.
Audit Metadata