alibabacloud-ros-agent
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The bridge script
scripts/ros_agent.pyinvokes the Alibaba Cloud CLI (aliyun) to perform ROS operations when thealiyun_clitransport is selected. This is a primary function of the skill for interacting with cloud resources. - [DYNAMIC_EXECUTION]: The Python script uses
importlib.import_moduleto lazily load Alibaba Cloud SDK components only when thecodetransport is active. This minimizes the initial execution footprint and ensures optional dependencies are only loaded when required. - [EXTERNAL_DOWNLOADS]: The skill instructions allow the agent to run
aliyun plugin install --name rosif the required plugin is missing. This downloads the official ROS extension for the Alibaba Cloud CLI from vendor-managed sources. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language prompts and remote API responses, creating an attack surface for indirect prompt injection. However, it incorporates mitigation strategies including structured stage gates for communication, sanitization of outputs via credential redaction, and mandatory user confirmation diagrams for infrastructure changes.
Audit Metadata