alibabacloud-cloudbackup-ecs-file-backup-essential-edition

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the official aliyun CLI for service management. All commands are documented with specific parameters, and the skill includes a 'Parameter Confirmation' step that requires explicit user consent before execution.
  • [PROMPT_INJECTION]: The skill incorporates a mandatory 'Scenario Eligibility Check' that acts as a safety guardrail. It instructs the agent to halt and warn the user if a request matches unsupported use cases (e.g., database backups or large data volumes), preventing misuse.
  • [CREDENTIALS_UNSAFE]: The skill strictly adheres to security rules regarding authentication. It explicitly forbids the echoing or hardcoding of AccessKeys (AK/SK) and directs users to the aliyun configure setup for secure credential handling.
  • [EXTERNAL_DOWNLOADS]: Installation instructions reference the vendor's official CDN (aliyuncli.alicdn.com) for downloading the CLI tools. These are recognized vendor resources and are documented for the purpose of environment setup.
  • [SAFE]: Input validation is enforced through a comprehensive table of regular expressions for every parameter (e.g., REGION_ID, INSTANCE_ID, paths). This significantly reduces the risk of indirect prompt injection or command injection via user-supplied values.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 03:56 AM