aliyun-alb-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official Alibaba Cloud SDKs including alibabacloud_alb20200616, alibabacloud_tea_openapi, and alibabacloud_credentials from official package registries.- [COMMAND_EXECUTION]: Executes local Python scripts to perform inventory, inspection, and lifecycle management operations on ALB resources.- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Ingests potentially untrusted metadata such as resource names, descriptions, and health status reasons from Alibaba Cloud API responses in scripts/check_health_status.py and scripts/get_instance_status.py.
- Boundary markers: Data retrieved from the API is presented to the agent in plain text or JSON format without explicit delimiters or injection warnings.
- Capability inventory: The skill provides extensive write permissions, including the ability to create, delete, and update load balancers, listeners, and forwarding rules.
- Sanitization: No specific sanitization or filtering for adversarial prompt instructions is performed on the data retrieved from the cloud environment before it is processed by the agent.
Audit Metadata