aliyun-devops-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches machine-readable API documentation from the official Alibaba Cloud metadata service (
api.aliyun.com). This is a standard operation used to provide up-to-date API discovery and documentation for the user. - [COMMAND_EXECUTION]: The skill includes several Python scripts designed to be executed by the user to interact with Alibaba Cloud DevOps services. These scripts allow for listing and managing projects, code repositories, and pipelines using the official Alibaba Cloud SDK.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external API metadata which represents a potential attack surface.
- Ingestion points: API documentation JSON is fetched from
api.aliyun.comand parsed inscripts/list_openapi_meta_apis.py. - Boundary markers: The data is handled as structured JSON, reducing the risk of instructions being interpreted as commands.
- Capability inventory: The skill's scripts perform file system writes to the
output/directory and make authenticated API calls to Alibaba Cloud via the SDK. - Sanitization: The skill uses standard Python JSON parsing and converts the metadata into local inventory files, which are then used for documentation and planning.
Audit Metadata