aliyun-qwen-multimodal-embedding
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text and media URLs to generate a JSON request payload. This represents a potential surface for indirect prompt injection if the downstream model or processing pipeline is vulnerable to malicious content embedded in the inputs.
- Ingestion points:
scripts/prepare_multimodal_embedding_request.pyaccepts input via command-line arguments (--text,--image,--video). - Boundary markers: None; inputs are placed directly into the JSON structure.
- Capability inventory: The script writes the resulting payload to the local filesystem using
pathlib. - Sanitization: No sanitization or validation is performed on the input content before payload generation.
- [COMMAND_EXECUTION]: The skill documentation provides shell commands for environment setup, code validation, and script execution.
- Evidence:
SKILL.mdcontains bash commands for creating output directories, compiling Python scripts withpy_compile, and executing the payload preparation script. - [EXTERNAL_DOWNLOADS]: The skill includes references to official Alibaba Cloud documentation and model studio resources.
- Evidence:
references/sources.mdcontains links tohelp.aliyun.comfor model documentation and usage guidelines.
Audit Metadata