aliyun-bdrc-backup
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/list_openapi_meta_apis.pyfetches OpenAPI metadata and API schemas from Alibaba Cloud's official domain (api.aliyun.com). This is a legitimate operational task for discovering cloud API capabilities. - [CREDENTIALS_UNSAFE]: The skill manages Alibaba Cloud access through standard, secure methods. It instructs users to use environment variables (
ALICLOUD_ACCESS_KEY_ID,ALICLOUD_ACCESS_KEY_SECRET) or the local shared credentials file (~/.alibabacloud/credentials), which is the recommended practice for cloud automation tools. - [COMMAND_EXECUTION]: Local Python scripts are used to automate the retrieval of API documentation and to validate the skill's environment. These operations are restricted to the local filesystem and authorized network endpoints.
Audit Metadata