aliyun-cdn-manage
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXPOSURE]: The skill's documentation identifies the standard location for Alibaba Cloud credentials at
~/.alibabacloud/credentialsand specifies the use of environment variables for AccessKeys. - [EXTERNAL_DOWNLOADS]: The skill fetches API metadata from Alibaba Cloud's official machine-readable metadata service at
api.aliyun.com. - [INDIRECT_PROMPT_INJECTION]: The skill has the surface area for indirect injection as it ingests and processes external JSON metadata to generate markdown documentation.
- Ingestion points:
scripts/list_openapi_meta_apis.pyfetches data from theapi.aliyun.comendpoint. - Boundary markers: Not present.
- Capability inventory: The skill scripts write output files to the local
output/directory and perform network requests to the metadata API. - Sanitization: Not present; the script parses external JSON and extracts API names directly into the output.
Audit Metadata