alibabacloud-pai-rec-diagnosis
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official Aliyun CLI setup script from
https://aliyuncli.alicdn.com/setup.shvia shell piping (| bash). This is an expected installation method for a technical tool and originates from a verified vendor domain. - [EXTERNAL_DOWNLOADS]: The skill references several remote resources for installation and verification, including binaries and scripts hosted on
aliyuncli.alicdn.com. These are recognized as legitimate vendor resources from the skill author. - [COMMAND_EXECUTION]: The workflow relies on executing multiple CLI commands using the
aliyuntool to retrieve service logs, metadata, and configurations. It also utilizes a local scriptscripts/validate.pyto perform structural checks on retrieved JSON data. - [CREDENTIALS_UNSAFE]: The skill explicitly defines security rules that prohibit the agent from reading, echoing, or asking for Alibaba Cloud Access Keys (AK/SK), directing users to configure credentials securely outside the interactive session.
- [SAFE]: The skill implements strict boundary markers and schema validation when processing external data like service logs or engine configurations, reducing the risk of indirect prompt injection.
Audit Metadata