alibabacloud-sls-index-config-management

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and provides commands to download the official Aliyun CLI binaries from vendor-controlled domains.
  • Evidence: wget https://aliyuncli.alicdn.com/aliyun-cli-macosx-latest-amd64.tgz in references/cli-installation-guide.md.
  • Evidence: wget https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz in references/cli-installation-guide.md.
  • [COMMAND_EXECUTION]: The skill executes several aliyun CLI subcommands to configure the environment and perform index management tasks.
  • Evidence: aliyun configure ai-mode enable and aliyun plugin update in SKILL.md.
  • Evidence: SLS CRUD operations like aliyun sls get-index, create-index, update-index, and delete-index as detailed in references/manage-index-config.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided log samples to automatically generate index configurations, creating a potential surface for indirect prompt injection.
  • Ingestion points: User-provided log samples in references/generate-index-from-logs.md.
  • Boundary markers: The skill expects logs in a structured key/value map format, but does not specify explicit boundary markers for the data ingestion.
  • Capability inventory: Capabilities include writing index configurations to SLS Logstores via create-index and update-index commands.
  • Sanitization: The skill performs type inference (long, double, json, text) on the input data, which acts as a basic validation layer before configuration generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:46 AM