das-agent

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes and displays streaming text data retrieved from the Alibaba Cloud DAS Agent API, creating a surface for indirect instructions to be processed.
  • Ingestion points: The _process_sse_line method in call_das_agent.py reads data directly from the network response stream.
  • Boundary markers: There are no explicit markers or warnings used to delimit external tool output from the agent's internal instructions.
  • Capability inventory: The skill has the capability to perform authenticated network operations using the requests library and execute the call_das_agent.py script via uv.
  • Sanitization: No content filtering, escaping, or validation is performed on the data received from the external service before it is rendered.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the external endpoint das.cn-shanghai.aliyuncs.com. This domain is associated with the official Alibaba Cloud infrastructure (the skill vendor), representing standard functional behavior for the agent.
  • [COMMAND_EXECUTION]: The skill instructions involve executing a local Python script call_das_agent.py using the uv tool to interact with the database service.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 12:51 AM