alibabacloud-polardbx-ops
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Provides instructions to download and execute the official Alibaba Cloud CLI setup script from the vendor's distribution domain (
https://aliyuncli.alicdn.com/setup.sh). - [COMMAND_EXECUTION]: Uses the
aliyunCLI and bundled helper scripts (scripts/poll_task.sh,scripts/spec_lookup.sh) to perform legitimate cloud infrastructure management tasks. - [SAFE]: Implements a robust 'Intent Routing' architecture that requires the agent to verify environment readiness (CLI version, plugin status, identity, and RAM permissions) before proceeding with operations.
- [SAFE]: Enforces a mandatory 'Secondary Confirmation' policy for all high-risk operations, including instance creation, deletion, account password resets, and network configuration changes.
- [SAFE]: Adheres to credential safety protocols by explicitly forbidding the hardcoding or echoing of Access Keys, Secret Keys, or account passwords, directing the agent to use placeholders for user-supplied values at runtime.
- [SAFE]: Includes security-conscious defaults, such as explicitly forbidding the allocation of public network addresses unless the user acknowledges the risk.
Audit Metadata