qianwenai-observe
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official Aliyun CLI binary from Alibaba Cloud's verified distribution domain (
aliyuncli.alicdn.com). This is a standard installation procedure for the required management tooling. - [COMMAND_EXECUTION]: It utilizes the
aliyunCLI to perform metadata queries and retrieve cloud metrics (CPU, Memory, Disk) and actual billing data from the user's account. These operations are scoped to observability. - [REMOTE_CODE_EXECUTION]: The skill uses the
aliyun ecs RunCommandAPI to execute diagnostic shell scripts on the user's managed ECS instances. These scripts are predefined in the instructions to perform only read-only health checks, such as checking service status and listening ports. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from application logs and RDS slow log records. While this presents an attack surface, the instructions include explicit directives for the agent to summarize and desensitize the data before reporting. Additionally, the included
render_report.pyscript uses HTML escaping to mitigate potential cross-site scripting (XSS) in generated reports.
Audit Metadata