alibabacloud-parse-x
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches document parsing results and layout data from signed Alibaba Cloud Object Storage Service (OSS) URLs (
aliyuncs.com) as a core part of its functionality. - [DATA_EXFILTRATION]: When processing local files, the skill uploads them to the Alibaba Cloud DashScope file service for analysis. It includes an automated cleanup mechanism that deletes these files from the cloud service immediately after the parsing or extraction task is complete.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external documents and media that could contain hidden instructions (Indirect Prompt Injection surface). As the primary purpose of the skill is document analysis, this risk is managed by providing the agent with strict triggering protocols and safety instructions to ignore embedded commands.
- [COMMAND_EXECUTION]: The skill utilizes a Python script to manage network communication with the Alibaba Cloud Parse-X API and perform file handling operations.
Audit Metadata