alibabacloud-devops
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and runs the 'alibabacloud-devops-mcp-server' package via npx. This package is an official vendor resource from Aliyun providing the DevOps integration logic.
- [COMMAND_EXECUTION]: The tool configuration in 'mcp-config.json' uses the npx command to execute the server, and the documentation includes usage examples for the 'mcporter' and 'npx' command-line tools.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from the Aliyun DevOps platform, such as source code content and collaboration comments, which could be used to attempt to influence the agent. • Ingestion points: Tools like 'get_file_blobs', 'list_change_request_comments', and 'get_work_item' read content from external sources. • Boundary markers: The skill does not provide specific instructions to the agent to treat this data as untrusted or to ignore instructions embedded within it. • Capability inventory: The skill possesses significant capabilities within the DevOps environment, including file writing, branch deletion, code merging, and pipeline execution. • Sanitization: No evidence of specific input validation or output sanitization is present in the skill instructions.
Audit Metadata