aliyun-fc-agentrun
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Python scripts for interacting with Alibaba Cloud APIs. It correctly handles credentials through environment variables (e.g.,
ALIBABACLOUD_ACCESS_KEY_ID), which is a secure practice compared to hardcoding secrets. - [COMMAND_EXECUTION]: The skill includes shell commands in
SKILL.mdfor running its internal Python scripts and a validation block that usespy_compileto verify script syntax. These operations are restricted to the local environment and the skill's own files. - [EXTERNAL_DOWNLOADS]: The scripts reference vendor-specific SDKs (
alibabacloud_agentrun20250910andalibabacloud_tea_openapi). The documentation directs users to obtain these from the official Alibaba Cloud OpenAPI Explorer or standard package managers. - [DATA_EXFILTRATION]: While the skill performs network operations to Alibaba Cloud endpoints (e.g.,
agentrun.cn-beijing.aliyuncs.com), these are required for its primary function. There is no evidence of data being sent to unauthorized or suspicious third-party domains.
Audit Metadata