aliyun-qwen-generation
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
dashscopepackage from the standard Python package registry. This is the official SDK provided by Alibaba Cloud for interacting with their Model Studio (DashScope) services. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it processes external user input and prepares it for model consumption.
- Ingestion points: The
scripts/prepare_generation_request.pyscript ingests untrusted data through the--promptargument. - Boundary markers: While the data is structured into a JSON payload, there are no specific delimiters or system instructions designed to prevent the model from obeying instructions embedded within the user-provided prompt.
- Capability inventory: The skill is intended to perform network requests to external API endpoints (via
curlor the SDK) and write request metadata to the local filesystem. - Sanitization: There is no evidence of input validation, filtering, or escaping of the prompt content before it is interpolated into the generation request.
Audit Metadata