alibabacloud-pai-workspace-manage
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to install the Aliyun CLI using a script fetched from the vendor's official CDN (aliyuncli.alicdn.com) and piped directly to bash. This is a standard installation method provided by the vendor.
- [EXTERNAL_DOWNLOADS]: The documentation provides links to download CLI binaries for various platforms from the vendor's infrastructure (aliyuncli.alicdn.com).
- [COMMAND_EXECUTION]: The skill performs shell command execution using the Aliyun CLI to create, query, and list PAI workspaces.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the Alibaba Cloud API (such as workspace names and descriptions). • Ingestion points: API responses processed in SKILL.md. • Boundary markers: Absent. • Capability inventory: Shell command execution via aliyun CLI. • Sanitization: Robust mandatory masking of sensitive fields (UserId, UserName, etc.) using jq filters in all query commands.
Audit Metadata