aliyun-pts-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches OpenAPI metadata from Alibaba Cloud's official domain (api.aliyun.com) to support API discovery. This is a standard operation for cloud management tools and targets a well-known service.
- [COMMAND_EXECUTION]: Local Python scripts execute shell commands to interact with the Alibaba Cloud PTS SDK for scene management, test control, and reporting.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Alibaba Cloud API metadata and service responses.
- Ingestion points: scripts/list_openapi_meta_apis.py (OpenAPI metadata), scripts/list_pts_scenes.py (PTS scene data).
- Boundary markers: Absent (the skill processes and displays retrieved data directly).
- Capability inventory: File system write access for output generation, network operations to Alibaba Cloud endpoints, and shell command execution for manual script invocation.
- Sanitization: Not explicitly implemented in the provided helper scripts. While this provides a theoretical surface for indirect injection if a service response were compromised, the risk is inherent to the administrative purpose of the skill.
Audit Metadata