alibabacloud-rds-instances-manage

• Outcome: Pass
• Latest audit: Jul 27, 2026 · 12:15 PM UTC
• Version: 0.0.1

Overview

This skill manages Alibaba Cloud RDS resources with powerful cloud actions, but its instructions clearly disclose those actions and require explicit confirmation before any mutation.

Install only if you intend to let an agent operate Alibaba Cloud RDS through your CLI profile. Use a least-privilege RAM user or role, prefer read-only permissions unless mutations are needed, set the intended region explicitly, and review each confirmation carefully because approved mutations can create costs, expose access, restart services, or delete instances.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

Natural-Language Policy Violations

Medium

• Confidence: 90% confidence
• Finding: The acceptance criteria require use of `cn-hangzhou` as the default target region and `cn-shanghai` for DAS when the region is omitted. This is a locale/region constraint stated as a requirement rather than an opt-in choice, which can violate language/locale policy for skills intended for broader use.

External Transmission

Medium

• Category: Data Exfiltration

Content

- [references/verification-method.md](references/verification-method.md): static, dry-run, and live read-only verification.
- [references/acceptance-criteria.md](references/acceptance-criteria.md): required and forbidden behavior.
- [Alibaba Cloud RDS OpenAPI 2014-08-15](https://help.aliyun.com/zh/rds/developer-reference/api-rds-2014-08-15-overview)
- [Alibaba Cloud CLI RDS 2014-08-15](https://api.aliyun.com/api-tools/cli/Rds/2014-08-15)
- [Alibaba Cloud DAS OpenAPI 2020-01-16](https://help.aliyun.com/zh/das/developer-reference/api-das-2020-01-16-overview)

## Constraints

• Confidence: 50% confidence
• Finding: https://api.aliyun.com/

External Transmission

Medium

• Category: Data Exfiltration

Content

## Official references

- [RDS OpenAPI 2014-08-15 overview](https://help.aliyun.com/zh/rds/developer-reference/api-rds-2014-08-15-overview)
- [RDS Alibaba Cloud CLI reference](https://api.aliyun.com/api-tools/cli/Rds/2014-08-15)
- [DAS OpenAPI 2020-01-16 overview](https://help.aliyun.com/zh/das/developer-reference/api-das-2020-01-16-overview)
- [GetPfsMetricTrends](https://help.aliyun.com/zh/das/developer-reference/api-das-2020-01-16-getpfsmetrictrends)
- [GetPfsSqlSummaries](https://help.aliyun.com/zh/das/developer-reference/api-das-2020-01-16-getpfssqlsummaries)

• Confidence: 15% confidence
• Finding: https://api.aliyun.com/

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

## Agent Execution Contract

Make the local environment ready when command execution is available. Do not ask the user to install or upgrade Alibaba Cloud CLI when the agent can do it after obtaining any required tool approval.

Do not run a business API until all readiness gates pass:

• Confidence: 80% confidence
• Finding: Do not ask the user

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

- Claim one region is the whole account.
- Claim the first page is a complete result.
- Report an empty result without checking region and filters.
- Send arbitrary CPU/IO metric names to `GetPfsMetricTrends`.

## 5. Mutation confirmation

• Confidence: 22% confidence
• Finding: without checking

Session Persistence

Medium

• Category: Rogue Agent

Content

| Capability | Rds Action | Required API inputs | Important optional inputs and risks |
|---|---|---|---|
| `create_db_instance` | `CreateDBInstance` | `RegionId`, `Engine`, `EngineVersion`, `DBInstanceClass`, `DBInstanceStorage`, `DBInstanceStorageType`, `DBInstanceNetType`, `PayType`, `SecurityIPList` | `InstanceNetworkType`, `VPCId`, `VSwitchId`, `ZoneId`, category, period; creates an order and may charge automatically |
| `modify_parameter` | `ModifyParameter` | `DBInstanceId` plus `Parameters` or `ParameterGroupId` | `Forcerestart`, `SwitchTimeMode`, `SwitchTime`; parameter changes can restart or destabilize the instance |
| `modify_db_instance_spec` | `ModifyDBInstanceSpec` | `DBInstanceId` plus at least one target spec field | class, storage, category, pay type, effective time; may create an order, charge, restart, or cause a transient connection impact |
| `modify_db_instance_description` | `ModifyDBInstanceDescription` | `DBInstanceId`, `DBInstanceDescription` | metadata-only but still mutating |

• Confidence: 22% confidence
• Finding: PList

VirusTotal

63/63 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.