alibabacloud-pai-dlc-job

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow repeatedly ingests free-text returned by the PAI-DLC/AIWorkSpace APIs—e.g., job logs/events via aliyun pai-dlc get-pod-logs/get-pod-events and resource discovery outputs—before/while driving subsequent actions, so an outsider can poison the data shown by these reads by submitting jobs or associated metadata to the watched tenant.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's installation guide requires downloading and installing the Aliyun CLI binaries from https://aliyuncli.alicdn.com/aliyun-cli-macosx-latest-amd64.tgz, https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz, https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-arm64.tgz, and https://aliyuncli.alicdn.com/aliyun-cli-windows-latest-amd64.zip during setup, which fetches remote executable code that the skill depends on at runtime.