alibabacloud-governance-evaluation-report

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/governance_query.py executes the official Aliyun CLI tool to fetch governance metadata and results. This is the primary function of the skill and is implemented using safe subprocess calls with argument lists.
  • [EXTERNAL_DOWNLOADS]: Documentation in references/cli-installation-guide.md points to official Alibaba Cloud domains for downloading the required Aliyun CLI binaries. These downloads are part of the standard setup for the vendor's tools.
  • [CREDENTIALS_UNSAFE]: The skill provides documentation on configuring authentication via the Aliyun CLI. It recommends using environment variables or the aliyun configure command, which are standard practices for cloud CLI tools. No sensitive credentials are hardcoded or handled unsafely by the skill's code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 01:22 AM