alibabacloud-rds-instances-manage
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it ingests data from external sources that could contain malicious instructions. \n
- Ingestion points: The skill reads database slow logs, error logs, and SQL insight statistics through APIs like
DescribeSlowLogRecords,DescribeErrorLogs, andGetPfsSqlSummaries. \n - Boundary markers: The instructions do not define explicit boundary markers or delimiters to isolate untrusted log content from the agent's instructions. \n
- Capability inventory: The skill possesses powerful mutating capabilities including
delete_db_instance,modify_security_ips, andrestart_db_instance. \n - Sanitization: The skill lacks explicit sanitization or filtering for potential injection patterns within the log data, focusing its redaction efforts solely on passwords. \n- [COMMAND_EXECUTION]: The skill utilizes local shell commands to support its workflow, including the
opensslutility for generating task-based session identifiers and thedatecommand for local time retrieval. The primary interface is the officialaliyunCLI. \n- [EXTERNAL_DOWNLOADS]: The skill automates the installation of Alibaba Cloud service plugins using thealiyun plugin installcommand. These resources are official extensions originating from the vendor's infrastructure. \n- [DATA_EXFILTRATION]: The skill manages cloud credentials and sensitive configuration. It implements industry-standard protections including mandatory profile verification via STS, explicit warnings against storing secrets in plain text, and a strictly enforced redaction policy for passwords in all outputs and logs.
Audit Metadata