alibabacloud-rds-copilot
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted user input and processes it through a remote AI service. Ingestion points: User input is collected from command-line arguments or standard input in
scripts/call_rds_ai.py. Boundary markers: There are no explicit boundary markers or delimiters used to encapsulate the user input within the API request. Capability inventory: The scriptscripts/call_rds_ai.pycommunicates over the network with the endpointrdsai.aliyuncs.com. Sanitization: No input sanitization or validation logic is implemented to filter potentially malicious instructions within the user query.
Audit Metadata