Alicloud Database Analyticdb Mysql

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent may create or modify AnalyticDB resources if the user asks it to do so.

Why it was flagged

The skill explicitly supports mutating Alibaba Cloud AnalyticDB resources through OpenAPI/SDK calls. This is purpose-aligned and disclosed, but these operations can change cloud resources.

Skill content

Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.

Recommendation

Review the target region, resource ID, and exact operation before approving any mutating API call.

Note

ASI03: Identity and Privilege Abuse

What this means

If broad Alibaba Cloud credentials are available, the agent could act with those privileges for AnalyticDB operations.

Why it was flagged

The skill may use Alibaba Cloud account credentials, including a local shared credential file. This is expected for the stated cloud-management purpose, but it is sensitive account authority.

Skill content

Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`

Recommendation

Use a least-privilege Alibaba Cloud RAM user or profile scoped to the intended AnalyticDB actions, and avoid using broad administrator keys.