bailian-managed-agent

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a comprehensive interface to the bl CLI, enabling the agent to execute a wide variety of infrastructure management and API-oriented commands including environment creation and deployment control.\n- [EXTERNAL_DOWNLOADS]: Features functionality to download remote files via bl managed-agent file download and skill versions via bl managed-agent skill download from the Alibaba Cloud Bailian platform.\n- [DATA_EXFILTRATION]: Enables the upload of local files via bl managed-agent file upload and the publishing of entire project directory sources, including skill scripts and binary files, via bl managed-agent project publish.\n- [INDIRECT_PROMPT_INJECTION]:\n
  • Ingestion points: Processes various local files including agents.yaml, project.json, agent.json, vault.json, and local Skill directories containing SKILL.md during initialization and building.\n
  • Boundary markers: Lacks explicit data boundary markers for config ingestion, though instructions mandate that the agent must always preview plans and require manual user confirmation before applying changes.\n
  • Capability inventory: Capable of remote resource mutation (create/destroy), file system writes (e.g., project init and restoration), and network communications via the CLI tool.\n
  • Sanitization: Implements credential redaction for diagnostic exports and provides automated migration of secrets from plaintext JSON to .env files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 11:50 PM