bailian-docs-llm-wiki
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No override or bypass markers were detected. The instructions focus on structured lookup workflows and strictly base responses on the provided documentation files.
- [DATA_EXFILTRATION]: No sensitive file paths or unauthorized network operations were found. While the documentation contains API call examples, they use placeholders like
sk-xxxor environment variables (e.g.,DASHSCOPE_API_KEY) and point to legitimate Alibaba Cloud endpoints. - [REMOTE_CODE_EXECUTION]: The skill does not contain any executable scripts that run automatically. The code snippets provided within the JSON files and documentation are purely for user educational purposes and do not trigger runtime execution within the agent environment.
- [OBFUSCATION]: No malicious obfuscation was detected. Base64 strings found in specific model samples (like GUI-Plus) are standard examples of Data URLs for image processing, which are consistent with the documented functionality of visual understanding models.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (crawled documentation), it includes strong instructions to the agent to base answers solely on the provided files and identifies boundary markers for source documentation. The capability inventory is limited to file reading for the purpose of information retrieval.
Audit Metadata