alibabacloud-sls-dashboard
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes official Aliyun CLI commands to manage SLS resources. In
scripts/lib/sls_client.py,subprocess.runis used to invoke thealiyunCLI with arguments constructed as lists to prevent shell injection.\n- [EXTERNAL_DOWNLOADS]: Setup instructions refer to official vendor setup scripts. Inreferences/cli-installation-guide.md, a command to download and run the Aliyun CLI installation script fromaliyuncli.alicdn.comis provided.\n- [DYNAMIC_EXECUTION]: Environment diagnostics verify prerequisites at runtime. Inscripts/doctor.py, dynamic module imports are used to check for the availability of required Python libraries.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes structured dashboard configurations which presents a theoretical surface for malicious content. However, the skill implements Markdown sanitization for visualized content and performs structural validation of all ingested JSON data.
Audit Metadata