aliyun-dlf-manage-next
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/list_openapi_meta_apis.pyfetches OpenAPI metadata directly from Alibaba Cloud's official metadata service atapi.aliyun.com. This is a routine operation used to discover supported API schemas and does not involve executing remote code. - [COMMAND_EXECUTION]: The skill includes instructions to run a local Python script for API discovery and uses
py_compileto validate its own bundled scripts during an initialization or validation phase. These commands are scoped to the skill's own files and intended functionality. - [SAFE]: The skill adheres to security best practices by instructing the use of standard Alibaba Cloud environment variables (
ALIBABACLOUD_ACCESS_KEY_ID,ALIBABACLOUD_ACCESS_KEY_SECRET) and configuration files for credentials, rather than requesting hardcoded secrets.
Audit Metadata