skills/aliyun/alibabacloud-aiops-skills/alibabacloud-sls-index-config-management/Gen Agent Trust Hub
alibabacloud-sls-index-config-management
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides commands to download the official Aliyun CLI binaries from vendor-controlled domains.
- Evidence:
wget https://aliyuncli.alicdn.com/aliyun-cli-macosx-latest-amd64.tgzinreferences/cli-installation-guide.md. - Evidence:
wget https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgzinreferences/cli-installation-guide.md. - [COMMAND_EXECUTION]: The skill executes several aliyun CLI subcommands to configure the environment and perform index management tasks.
- Evidence:
aliyun configure ai-mode enableandaliyun plugin updateinSKILL.md. - Evidence: SLS CRUD operations like
aliyun sls get-index,create-index,update-index, anddelete-indexas detailed inreferences/manage-index-config.md. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided log samples to automatically generate index configurations, creating a potential surface for indirect prompt injection.
- Ingestion points: User-provided log samples in
references/generate-index-from-logs.md. - Boundary markers: The skill expects logs in a structured key/value map format, but does not specify explicit boundary markers for the data ingestion.
- Capability inventory: Capabilities include writing index configurations to SLS Logstores via
create-indexandupdate-indexcommands. - Sanitization: The skill performs type inference (long, double, json, text) on the input data, which acts as a basic validation layer before configuration generation.
Audit Metadata