alibabacloud-sls-agent-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and install additional specialist skills from the
aliyun/alibabacloud-aiops-skillsrepository if they are not already available in the environment. - Evidence: Found in
references/install-specialist-skills.md, which specifies fetching skills from thealiyunorganization's repository. - [COMMAND_EXECUTION]: The skill defines a shell command to be executed for managing its own dependencies and specialist skills, requiring explicit user permission before execution.
- Evidence:
npx -y skills add aliyun/alibabacloud-aiops-skills --skill <full-skill-name> -y --full-depth -ginreferences/install-specialist-skills.md. - [CREDENTIALS_SAFE]: The skill contains explicit safety guidelines directing the agent never to request, read, or expose Alibaba Cloud AccessKey credentials.
- Evidence: The 'Boundaries and completion' section in
SKILL.mdexplicitly forbids handlingAccessKey IDorAccessKey Secretvalues.
Audit Metadata