bailian-train-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of the
bl(Bailian CLI) to perform operations such as authentication, dataset validation, fine-tuning, and deployment. These are the primary functions of the skill and are performed through standard shell commands. - [COMMAND_EXECUTION]: Includes a localized monitoring utility,
scripts/wait.sh, which is executed by the agent to poll for task completion. The script uses standard POSIX-compliant utilities (grep,cut,sleep) and is designed to handle shell environment limitations (such as zsh read-only variables) safely. - [EXTERNAL_DOWNLOADS]: Mentions the optional use of the
edge-ttsPython package for generating synthetic audio data for testing purposes. This is documented as a manual step for the user/agent to prepare data. - [DATA_EXFILTRATION]: Demonstrates legitimate interaction with the official
dashscope.aliyuncs.comAPI for model inference. The interaction is secured using theDASHSCOPE_API_KEYenvironment variable, following industry-standard authentication practices. - [SAFE]: The skill implements proactive security and cost-management measures, including verifying authentication status before operations and requiring explicit human-in-the-loop confirmation before allocating reserved (billable) resources like
muorptuplans.
Audit Metadata