aliyun-openapi-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches product and API metadata from official Alibaba Cloud endpoints (api.aliyun.com). These are well-known service endpoints used for their intended purpose of providing OpenAPI documentation.
- [DATA_EXPOSURE]: The scripts use standard environment variables (ALIBABACLOUD_ACCESS_KEY_ID, ALIBABACLOUD_ACCESS_KEY_SECRET) to interact with Alibaba Cloud APIs. This is a standard and safe practice for secret management in automated scripts.
- [COMMAND_EXECUTION]: The SKILL.md provides instructions for compiling local Python scripts using
python3 -m py_compile. This is a standard build-time operation on local files and does not involve remote code execution or shell injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from Alibaba Cloud's metadata service to generate reports and plan further actions. While this creates a data ingestion surface, the source is an official cloud provider API, and the data is used for structural reporting rather than as instructions for the agent.
Audit Metadata