alibabacloud-sls-agent-workflow

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and install additional specialist skills from the aliyun/alibabacloud-aiops-skills repository if they are not already available in the environment.
  • Evidence: Found in references/install-specialist-skills.md, which specifies fetching skills from the aliyun organization's repository.
  • [COMMAND_EXECUTION]: The skill defines a shell command to be executed for managing its own dependencies and specialist skills, requiring explicit user permission before execution.
  • Evidence: npx -y skills add aliyun/alibabacloud-aiops-skills --skill <full-skill-name> -y --full-depth -g in references/install-specialist-skills.md.
  • [CREDENTIALS_SAFE]: The skill contains explicit safety guidelines directing the agent never to request, read, or expose Alibaba Cloud AccessKey credentials.
  • Evidence: The 'Boundaries and completion' section in SKILL.md explicitly forbids handling AccessKey ID or AccessKey Secret values.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 03:40 AM
Security Audit — agent-trust-hub — alibabacloud-sls-agent-workflow