dashscope
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides clear instructions for using Alibaba Cloud's DashScope API. It correctly advises users to store the
DASHSCOPE_API_KEYin a.envfile, which is a standard and safe practice for secret management. It also mentions that the tool includes redaction logic to prevent the API key from leaking into logs. The network operations are directed to official Alibaba Cloud domains (dashscope.aliyuncs.com), which are well-known and legitimate service endpoints. No suspicious patterns such as obfuscation, prompt injection, or remote code execution were detected.
Audit Metadata