alicloud-backup-bdrc
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches OpenAPI metadata from
api.aliyun.com. This is a well-known service provided by Alibaba Cloud for API discovery and documentation, and the operation is documented neutrally as a functional requirement for the skill. - [COMMAND_EXECUTION]: The skill includes a Python script for fetching metadata and a validation block in the
SKILL.mdthat usespy_compile. These are standard development and verification steps and do not involve arbitrary or dangerous command execution. - [DATA_EXFILTRATION]: The skill references sensitive environment variables like
ALICLOUD_ACCESS_KEY_IDandALICLOUD_ACCESS_KEY_SECRET. However, there are no patterns detected that attempt to exfiltrate these credentials to unauthorized third-party domains. All documented network activity is directed toward official Alibaba Cloud endpoints.
Audit Metadata