bailian-web-search
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute 'bl' CLI commands such as 'bl config show', 'bl text chat', and 'bl search web'. These commands are used to interact with the Alibaba Cloud Bailian platform and are consistent with the skill's stated purpose of web search routing.
- [DATA_EXFILTRATION]: The skill retrieves local CLI configuration using 'bl config show --output json'. This is performed to identify the active model identity and ensure that search requests are routed correctly. While this accesses configuration data, it is used locally for routing logic.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided search queries by interpolating them into CLI command arguments. Ingestion points: User input is passed to the '--message' and '--query' flags. Boundary markers: The instructions use double quotes around the query parameters. Capability inventory: The skill utilizes subprocess execution of the 'bl' CLI tool for network-based search and chat operations. Sanitization: The skill relies on standard command-line argument quoting.
Audit Metadata