alibabacloud-das-agent
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official Alibaba Cloud Credentials SDK to resolve access tokens via a secure provider chain (environment variables, config files, or ECS metadata), ensuring no sensitive credentials are hardcoded.- [SAFE]: Network operations are restricted to the official vendor endpoint (das.cn-shanghai.aliyuncs.com) to provide the intended database diagnostic services.- [SAFE]: The implementation includes robust input validation for user questions and session identifiers, incorporating length restrictions and character whitelisting to prevent injection attacks.- [SAFE]: The script effectively mitigates indirect prompt injection risks by using clear boundary markers to separate external API responses from the agent's internal status output and through strict validation of processed data.
Audit Metadata