alibabacloud-pts-ops

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download Aliyun CLI binaries from aliyuncli.alicdn.com and refers to official documentation on aliyun.com and github.com/aliyun. These references target official vendor resources and are documented neutrally as part of the setup process.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface through the ingestion of external data during stress test creation and execution.
  • Ingestion points: User-provided parameters such as Target URL, Scene Name, Concurrency, Duration, and JMX File are processed in SKILL.md and references/pts-scene-json-reference.md.
  • Boundary markers: The instructions use explicit markers like [MUST], IMPORTANT, and Pre-flight Safety Checks to distinguish control logic from data processing.
  • Capability inventory: The skill facilitates high-volume network traffic generation using aliyun pts start-pts-scene and aliyun pts start-testing-jmeter-scene (as detailed across all reference files).
  • Sanitization: The skill's instructions strictly require the agent to present a summary of all parameters to the user and await explicit approval before executing any traffic-generating commands.
  • [COMMAND_EXECUTION]: The skill makes extensive use of the Aliyun CLI to manage cloud resources. These operations are the primary purpose of the skill and utilize standard, vendor-supported command patterns for performance testing and resource cleanup.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 08:37 AM