bailian-managed-agent
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a comprehensive interface to the
blCLI, enabling the agent to execute a wide variety of infrastructure management and API-oriented commands including environment creation and deployment control.\n- [EXTERNAL_DOWNLOADS]: Features functionality to download remote files viabl managed-agent file downloadand skill versions viabl managed-agent skill downloadfrom the Alibaba Cloud Bailian platform.\n- [DATA_EXFILTRATION]: Enables the upload of local files viabl managed-agent file uploadand the publishing of entire project directory sources, including skill scripts and binary files, viabl managed-agent project publish.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: Processes various local files including
agents.yaml,project.json,agent.json,vault.json, and local Skill directories containingSKILL.mdduring initialization and building.\n - Boundary markers: Lacks explicit data boundary markers for config ingestion, though instructions mandate that the agent must always preview plans and require manual user confirmation before applying changes.\n
- Capability inventory: Capable of remote resource mutation (create/destroy), file system writes (e.g., project init and restoration), and network communications via the CLI tool.\n
- Sanitization: Implements credential redaction for diagnostic exports and provides automated migration of secrets from plaintext JSON to
.envfiles.
Audit Metadata