aliyun-sls-log-query
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes log data from Alibaba Cloud Log Service (SLS), which constitutes untrusted external data. This creates a surface for indirect prompt injection attacks where malicious instructions hidden in logs could influence the agent's behavior.
- Ingestion points: The scripts
scripts/query_logs.pyandscripts/troubleshoot.pyfetch log contents through thealiyun-log-python-sdkand output them to the agent's context. - Boundary markers: No explicit delimiters (e.g., XML tags or markdown blocks with warnings) are used in the scripts or instructions to separate external log data from agent instructions.
- Capability inventory: The skill includes capabilities to query, aggregate, and display log data using the Alibaba Cloud SDK. It does not provide high-privilege operations like file writing or arbitrary network access.
- Sanitization: There is no evidence of sanitization, filtering, or escaping of the log data before it is presented to the agent.
Audit Metadata