alibabacloud-pts-ops
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download Aliyun CLI binaries from
aliyuncli.alicdn.comand refers to official documentation onaliyun.comandgithub.com/aliyun. These references target official vendor resources and are documented neutrally as part of the setup process. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface through the ingestion of external data during stress test creation and execution.
- Ingestion points: User-provided parameters such as
Target URL,Scene Name,Concurrency,Duration, andJMX Fileare processed inSKILL.mdandreferences/pts-scene-json-reference.md. - Boundary markers: The instructions use explicit markers like
[MUST],IMPORTANT, andPre-flight Safety Checksto distinguish control logic from data processing. - Capability inventory: The skill facilitates high-volume network traffic generation using
aliyun pts start-pts-sceneandaliyun pts start-testing-jmeter-scene(as detailed across all reference files). - Sanitization: The skill's instructions strictly require the agent to present a summary of all parameters to the user and await explicit approval before executing any traffic-generating commands.
- [COMMAND_EXECUTION]: The skill makes extensive use of the Aliyun CLI to manage cloud resources. These operations are the primary purpose of the skill and utilize standard, vendor-supported command patterns for performance testing and resource cleanup.
Audit Metadata