compliance-risk-qa
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to official Alibaba Cloud (Aliyun) DashScope MCP services hosted at dashscope.aliyuncs.com to query financial regulations and data. These resources are vendor-owned endpoints used for legitimate information retrieval.
- [PROMPT_INJECTION]: The skill processes untrusted user input, such as sales scripts and compliance questions, for analysis. While this represents a surface for indirect prompt injection, the skill's capabilities are limited to information synthesis and do not include high-risk operations like shell execution or file system modifications.
Audit Metadata