aliyun-chatbot-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructions specify the use of sensitive Alibaba Cloud credentials stored in environment variables (ALIBABACLOUD_ACCESS_KEY_ID, ALIBABACLOUD_ACCESS_KEY_SECRET) and a shared configuration file (~/.alibabacloud/credentials).
- [EXTERNAL_DOWNLOADS]: The script scripts/list_openapi_meta_apis.py fetches OpenAPI metadata from api.aliyun.com, which is an official Alibaba Cloud service domain.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external API metadata endpoints.
- Ingestion points: scripts/list_openapi_meta_apis.py fetches JSON documentation from https://api.aliyun.com/meta/v1/products/.
- Boundary markers: None present in instructions or script logic.
- Capability inventory: The skill is designed to call business APIs for creating, updating, and managing chatbot resources based on the ingested metadata.
- Sanitization: No specific sanitization or filtering of the fetched metadata is implemented before the agent processes it for decision-making.
Audit Metadata