dataworks-open-api

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The discovery scripts fetch_api_overview.py and list_openapi_meta_apis.py utilize subprocess.run to execute curl as a fallback mechanism. This is used to retrieve API metadata and documentation from official Alibaba Cloud domains (help.aliyun.com and next.api.aliyun.com) when standard libraries encounter SSL verification issues.
  • [EXTERNAL_DOWNLOADS]: Fetches structured API schemas and help documentation from Alibaba Cloud's official developer portals. These downloads are used to populate the agent's knowledge of available DataWorks commands at runtime.
  • [DATA_EXFILTRATION]: Authentication is handled via standard Alibaba Cloud environment variables and shared credential files (~/.alibabacloud/credentials). No unauthorized data transmission or exfiltration to third-party domains was detected.
  • [PROMPT_INJECTION]: The skill instructions focus on technical workflow orchestration and do not contain patterns attempting to bypass safety filters or override system instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 06:23 AM