alibabacloud-devops
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official
alibabacloud-devops-mcp-serverpackage from the NPM registry usingnpxduring tool invocation.\n- [COMMAND_EXECUTION]: Executes the MCP server and its associated tools throughnpxshell commands.\n- [REMOTE_CODE_EXECUTION]: Provides functionality to trigger CI/CD pipelines (create_pipeline_run,execute_pipeline_job_run), which results in remote code execution on the cloud platform.\n- [PROMPT_INJECTION]: Contains a surface for indirect prompt injection by ingesting untrusted data from the DevOps environment.\n - Ingestion points: Reads file contents (
get_file_blobs), commit messages (list_commits), and execution logs (get_pipeline_job_run_log).\n - Boundary markers: None identified; there are no instructions provided to the agent to treat external content as data only.\n
- Capability inventory: Significant capabilities are available, such as file modification (
update_file), resource ownership changes, and pipeline execution triggers.\n - Sanitization: No evidence of input validation or sanitization is present in the skill instructions.
Audit Metadata