aliyun-qwen-deep-research

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the dashscope package from the official Python Package Index (PyPI) to interact with Alibaba Cloud's services.
  • [COMMAND_EXECUTION]: The skill includes standard CLI commands for setting up a Python virtual environment, installing dependencies, and running a local script (prepare_deep_research_request.py) to generate JSON request payloads.
  • [CREDENTIALS_UNSAFE]: The documentation references setting the DASHSCOPE_API_KEY environment variable or using the standard Alibaba Cloud credentials file located at ~/.alibabacloud/credentials. This follows established security best practices for credential management and does not include hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:27 AM