aliyun-rds-supabase
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a standard interface for interacting with the Alibaba Cloud RDS AI Service. It correctly guides the user toward secure credential management using environment variables (
ALIBABACLOUD_ACCESS_KEY_ID,ALIBABACLOUD_ACCESS_KEY_SECRET) and standard configuration files, adhering to the principle of least privilege. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of data from external cloud APIs, which serves as a vulnerability surface for indirect prompt injection.
- Ingestion points: Responses from Alibaba Cloud OpenAPI endpoints as outlined in
references/api_overview.mdandreferences/api_reference.md. - Boundary markers: None explicitly defined to delimit API data from agent instructions.
- Capability inventory: The skill includes file writing to the
output/aliyun-rds-supabase/directory and administrative capabilities such asResetInstancePassword,ModifyInstanceAuthConfig, andModifyInstanceIpWhitelist. - Sanitization: No explicit content sanitization or validation logic is implemented for the data retrieved from external API calls.
Audit Metadata