spring-ai-alibaba
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and code examples in Markdown format. There are no executable scripts, binary files, or configuration instructions that trigger automated actions on the host system.
- [CREDENTIALS_SAFE]: Sensitive configuration fields, such as
api-key, are properly handled using environment variable placeholders (e.g.,${DASHSCOPE_API_KEY}) rather than hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The Maven and Gradle dependencies reference official packages from Alibaba Cloud (
com.alibaba.cloud.ai) and Spring Boot (org.springframework.boot), which are recognized and trusted sources. - [NO_CODE]: There are no implementation scripts provided with the skill, mitigating risks associated with command execution or privilege escalation.
Audit Metadata