alibabacloud-video-editor
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official Alibaba Cloud SDK for Python to interact with cloud services. It follows standard security practices by using the default credential chain to resolve authentication from environment variables or the local configuration file at
~/.alibabacloud/credentials.ini. No sensitive data is hardcoded or exfiltrated to non-vendor domains. - [SAFE]: The execution script
scripts/video_editor.pyimplements robust input validation, including region whitelisting, Job ID pattern matching, and JSON schema validation for the Timeline and Output configurations. - [SAFE]: The skill incorporates a safety mechanism via the
confirm_high_risk_operationfunction, which requires explicit user confirmation before submitting cloud-based processing jobs, thereby preventing unauthorized resource consumption or unintended costs. - [SAFE]: All remote service endpoints and documentation references target official Alibaba Cloud domains (
aliyun.comandaliyuncs.com). These are recognized as well-known and trusted infrastructure for the skill's intended purpose. - [SAFE]: The skill demonstrates high manifest consistency; the stated purpose of cloud-based video editing aligns perfectly with the code logic, tool requirements, and permission requests documented in
references/ram-policies.md.
Audit Metadata