aliyun-pixverse-generation
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and a utility script to interact with Alibaba Cloud's video generation models. All code is transparent and follows standard development practices for API interaction.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing 'dashscope', which is the official Alibaba Cloud Model Studio SDK, from a standard registry (PyPI). This is a legitimate dependency for the skill's purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided prompts. Ingestion points: Prompt argument in 'scripts/prepare_aishi_request.py'. Boundary markers: JSON structure created by 'json.dumps' in the script. Capability inventory: The script is limited to generating a JSON payload file in a predefined output directory. Sanitization: Standard JSON encoding is used to escape characters, preventing schema confusion. These measures minimize the risk of prompt-based attacks during request preparation.
Audit Metadata