Alicloud Database Rds Supabase

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or overbroad request could affect database availability, network access, SSL settings, or instance lifecycle.

Why it was flagged

The skill can create, delete, stop, restart, and reconfigure cloud database-related resources. These actions are high impact, but they are central to the stated RDS Supabase management purpose and the workflow requires explicit parameters and user-intent confirmation.

Skill content
Instance:`CreateAppInstance` / `DeleteAppInstance` / `StartInstance` / `StopInstance` / `RestartInstance` ... Security:`ModifyInstanceIpWhitelist` ... `ModifyInstanceSSL`
Recommendation

Approve mutating operations only after checking the target region, instance ID, requested action, and rollback plan.

What this means

Credentials with broad RAM permissions could let the agent change or view more cloud resources than intended.

Why it was flagged

The skill requires Alibaba Cloud credentials or a local Alibaba Cloud credential profile to call the provider API. This is expected for the integration, but it gives the agent delegated cloud-account authority.

Skill content
Environment variables (preferred):`ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Standard credentials file:`~/.alibabacloud/credentials`
Recommendation

Use a least-privilege RAM user or role limited to the required RDS AI/Supabase operations and target resources.

What this means

Local evidence files could accidentally retain sensitive configuration details if raw outputs are saved.

Why it was flagged

The skill may handle sensitive password, authentication, endpoint, or storage-configuration data and asks to persist outputs locally. The output path is scoped, but the instructions do not explicitly require redaction.

Skill content
Use for ... resetting passwords, querying endpoints/auth/storage ... Save artifacts, command outputs, and API response summaries under `output/alicloud-database-rds-supabase/`.
Recommendation

Redact passwords, access keys, tokens, certificates, and auth/storage secrets before writing evidence files.