alibabacloud-tair-ai-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Aliyun CLI installation script from a vendor-owned domain (aliyuncli.alicdn.com). This is used for initial tool setup.
- [COMMAND_EXECUTION]: The skill executes the Aliyun CLI and a bundled bash script (
scripts/call_yaochi_agent.sh) to interact with the Database Autonomy Service (DAS) API. The script includes safety checks such as length limits and character validation for user-provided session IDs and queries. - [PRIVILEGE_ESCALATION]: The documentation includes standard use of
sudofor installing thejqdependency and moving the Aliyun CLI binary to a system path during the manual installation process. - [INDIRECT_PROMPT_INJECTION]: The skill processes streaming response data from an external API (get-yao-chi-agent). The ingestion point is the
scripts/call_yaochi_agent.shscript, which usesjqto parse structured JSON/SSE data and extract theContentfield before it is returned to the agent context. The script implements input validation for theQUERYandSESSION_IDparameters to mitigate injection risks.
Audit Metadata