aliyun-modelstudio-entry
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as an entry point that processes external data from Alibaba Cloud API responses (e.g., polling task results).
- Ingestion points: API response fields such as
output.task_statusandoutput.video_urlfrom the Alibaba Cloud DashScope service inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided for the processed API data.
- Capability inventory: The skill uses shell commands for environment setup (
python3 -m venv,pip install) and validation (mkdir,echo). It primarily routes to other local skills where more significant capabilities may reside. - Sanitization: The instructions do not describe sanitization or validation of the external API content before processing.
Audit Metadata