aliyun-ccai-manage

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/list_openapi_meta_apis.py fetches OpenAPI metadata directly from api.aliyun.com. This is an official Alibaba Cloud service used for discovering API schemas and is considered a safe, well-known resource for cloud management tasks.
  • [COMMAND_EXECUTION]: The skill executes local Python scripts to fetch metadata and perform syntax validation during the setup process. These operations are limited to the skill's own directory and standard output paths.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs the use of environment variables (ALIBABACLOUD_ACCESS_KEY_ID, ALIBABACLOUD_ACCESS_KEY_SECRET) for authentication, which is a standard and secure practice. It does not contain any hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:27 AM