aliyun-cdn-manage

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXPOSURE]: The skill's documentation identifies the standard location for Alibaba Cloud credentials at ~/.alibabacloud/credentials and specifies the use of environment variables for AccessKeys.
  • [EXTERNAL_DOWNLOADS]: The skill fetches API metadata from Alibaba Cloud's official machine-readable metadata service at api.aliyun.com.
  • [INDIRECT_PROMPT_INJECTION]: The skill has the surface area for indirect injection as it ingests and processes external JSON metadata to generate markdown documentation.
  • Ingestion points: scripts/list_openapi_meta_apis.py fetches data from the api.aliyun.com endpoint.
  • Boundary markers: Not present.
  • Capability inventory: The skill scripts write output files to the local output/ directory and perform network requests to the metadata API.
  • Sanitization: Not present; the script parses external JSON and extracts API names directly into the output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 06:00 AM