alibabacloud-polardb-mysql-inspection
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to the official Alibaba Cloud CLI setup script hosted on the vendor's CDN at
https://aliyuncli.alicdn.com/setup.sh. This is a trusted resource provided by the skill author ('aliyun') for the intended purpose of environment setup. - [COMMAND_EXECUTION]: The skill executes local shell commands through
subprocess.runin thehealth-inspect.pyandfind-instance-region.pyscripts to interact with thealiyunCLI. This is necessary for fetching monitoring data and cluster attributes from the cloud provider. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as database slow logs and table names which could potentially contain prompt instructions.
- Ingestion points: Database metadata and slow log entries are retrieved from Alibaba Cloud APIs and processed in
scripts/health-inspect.pyto generate reports. - Boundary markers: The HTML report generator uses standard HTML character escaping, though explicit prompt boundary markers (e.g., XML tags) are not used in the Markdown or Text output modes.
- Capability inventory: The skill has the capability to write local report files and execute read-only API commands through the CLI.
- Sanitization: Basic HTML entity escaping is performed on string data before it is rendered into the final HTML inspection report.
Audit Metadata