Aliyun Gbi Analytics

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a straightforward Alibaba Cloud DataAnalysisGBI helper, with the main caution that it uses cloud credentials and can change cloud resources when requested.

Use this skill with least-privilege Alibaba Cloud credentials, confirm the region and resource IDs before any change, and review saved output files because they may contain resource details or API response summaries.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI03: Identity and Privilege Abuse

What this means

If the configured credentials have broad permissions, the agent could perform actions across more Alibaba Cloud resources than intended.

Why it was flagged

The skill tells the agent where to obtain Alibaba Cloud credentials. This is expected for Alibaba Cloud API management, but it gives the agent delegated access to the user's cloud account.

Skill content

Environment variables: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Shared config file: `~/.alibabacloud/credentials`

Recommendation

Use a least-privilege Alibaba Cloud AccessKey scoped to DataAnalysisGBI and the required region/resources, and avoid using broad administrative credentials.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

A mistaken region, resource ID, or action could create, update, or modify DataAnalysisGBI resources unexpectedly.

Why it was flagged

The skill explicitly supports mutating Alibaba Cloud API calls. This matches the stated management purpose, but these actions can alter cloud resources.

Skill content

Change/configure: prefer `Create*` / `Update*` / `Modify*` / `Set*` APIs for mutations.

Recommendation

Before running mutating operations, confirm the region, resource identifier, intended change, and rollback plan.