das-agent
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and displays streaming text data retrieved from the Alibaba Cloud DAS Agent API, creating a surface for indirect instructions to be processed.
- Ingestion points: The
_process_sse_linemethod incall_das_agent.pyreads data directly from the network response stream. - Boundary markers: There are no explicit markers or warnings used to delimit external tool output from the agent's internal instructions.
- Capability inventory: The skill has the capability to perform authenticated network operations using the
requestslibrary and execute thecall_das_agent.pyscript viauv. - Sanitization: No content filtering, escaping, or validation is performed on the data received from the external service before it is rendered.
- [EXTERNAL_DOWNLOADS]: The skill communicates with the external endpoint
das.cn-shanghai.aliyuncs.com. This domain is associated with the official Alibaba Cloud infrastructure (the skill vendor), representing standard functional behavior for the agent. - [COMMAND_EXECUTION]: The skill instructions involve executing a local Python script
call_das_agent.pyusing theuvtool to interact with the database service.
Audit Metadata