Alicloud Database Rds Supabase
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: alicloud-database-rds-supabase Version: 1.0.1 The skill bundle is a legitimate tool for managing Alibaba Cloud RDS Supabase instances via the RDS AI Service OpenAPI. It provides comprehensive instructions and API references for resource lifecycle management, security configurations (SSL, IP whitelists), and RAG settings. The skill follows standard cloud management practices, such as recommending least-privilege credentials and environment variables (ALICLOUD_ACCESS_KEY_ID), and includes safety-oriented instructions to confirm actions with the user. No evidence of data exfiltration, malicious execution, or prompt injection was found across the files (SKILL.md, api_reference.md, etc.).
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A mistaken or overbroad request could affect database availability, network access, SSL settings, or instance lifecycle.
The skill can create, delete, stop, restart, and reconfigure cloud database-related resources. These actions are high impact, but they are central to the stated RDS Supabase management purpose and the workflow requires explicit parameters and user-intent confirmation.
Instance:`CreateAppInstance` / `DeleteAppInstance` / `StartInstance` / `StopInstance` / `RestartInstance` ... Security:`ModifyInstanceIpWhitelist` ... `ModifyInstanceSSL`
Approve mutating operations only after checking the target region, instance ID, requested action, and rollback plan.
Credentials with broad RAM permissions could let the agent change or view more cloud resources than intended.
The skill requires Alibaba Cloud credentials or a local Alibaba Cloud credential profile to call the provider API. This is expected for the integration, but it gives the agent delegated cloud-account authority.
Environment variables (preferred):`ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Standard credentials file:`~/.alibabacloud/credentials`
Use a least-privilege RAM user or role limited to the required RDS AI/Supabase operations and target resources.
Local evidence files could accidentally retain sensitive configuration details if raw outputs are saved.
The skill may handle sensitive password, authentication, endpoint, or storage-configuration data and asks to persist outputs locally. The output path is scoped, but the instructions do not explicitly require redaction.
Use for ... resetting passwords, querying endpoints/auth/storage ... Save artifacts, command outputs, and API response summaries under `output/alicloud-database-rds-supabase/`.
Redact passwords, access keys, tokens, certificates, and auth/storage secrets before writing evidence files.