alibabacloud-sls-dashboard

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes official Aliyun CLI commands to manage SLS resources. In scripts/lib/sls_client.py, subprocess.run is used to invoke the aliyun CLI with arguments constructed as lists to prevent shell injection.\n- [EXTERNAL_DOWNLOADS]: Setup instructions refer to official vendor setup scripts. In references/cli-installation-guide.md, a command to download and run the Aliyun CLI installation script from aliyuncli.alicdn.com is provided.\n- [DYNAMIC_EXECUTION]: Environment diagnostics verify prerequisites at runtime. In scripts/doctor.py, dynamic module imports are used to check for the availability of required Python libraries.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes structured dashboard configurations which presents a theoretical surface for malicious content. However, the skill implements Markdown sanitization for visualized content and performs structural validation of all ingested JSON data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 02:12 AM