aliyun-qwen-image-edit
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the 'dashscope' Python package, which is the official SDK for Alibaba Cloud's Model Studio. This is a legitimate dependency necessary for interacting with the cloud provider's API.
- [CREDENTIALS_UNSAFE]: The documentation instructs users on standard credential management practices for Alibaba Cloud, such as setting environment variables or using the official credentials file. No hardcoded secrets or unsafe exposures were identified.
- [COMMAND_EXECUTION]: The skill utilizes shell commands for environment configuration, including virtual environment creation and dependency installation. It also executes a local helper script to format API requests. These commands are well-defined and align with the skill's stated purpose.
- [DATA_EXFILTRATION]: While the skill handles user prompts and image data, it does so to facilitate communication with authorized Alibaba Cloud API endpoints via the official SDK, which is the intended functionality of the skill.
Audit Metadata