alibabacloud-pai-eas-service-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Alibaba Cloud CLI installation script from a vendor-controlled domain at aliyuncli.alicdn.com during the pre-check stage.
- [REMOTE_CODE_EXECUTION]: Installs the cloud management tools by piping the setup script from the vendor's CDN directly into the bash shell as specified in the SKILL.md pre-check instructions.
- [COMMAND_EXECUTION]: Orchestrates the deployment by executing a sequence of shell commands to configure profiles, install plugins, and invoke cloud APIs for service management.
- [PROMPT_INJECTION]: Ingests and processes data retrieved from cloud environment APIs to dynamically build service configurations.
- Ingestion points: Metadata returned from aliyun aiworkspace list-images, list-workspaces, and describe-machine-spec calls.
- Boundary markers: None explicitly defined to delimit external API data within the agent's instructional context.
- Capability inventory: Full access to create, describe, and delete PAI-EAS services via shell execution.
- Sanitization: Employs jq to parse and extract specific fields from JSON API responses before they are used in deployment logic.
Audit Metadata