Aliyun Rds Supabase

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent for Alibaba Cloud RDS Supabase administration, but it can use cloud credentials and perform high-impact database instance changes.

Install only if you intend to let the agent help manage Alibaba Cloud RDS Supabase resources. Use a least-privilege RAM credential, confirm region and instance IDs before mutations, and review saved output files for secrets or sensitive configuration before sharing.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used incorrectly, the agent could stop, restart, delete, reconfigure, or reset access for Alibaba Cloud RDS Supabase resources.

Why it was flagged

The skill is explicitly intended to perform mutating cloud/database operations. This is purpose-aligned, and the workflow includes confirmation and bounded-scope guidance, but the operations can materially affect availability and access.

Skill content
including creating, starting/stopping/restarting instances, resetting passwords, querying endpoints/auth/storage, configuring auth/RAG/SSL/IP whitelist
Recommendation

Use least-privilege Alibaba Cloud credentials, confirm the exact region and instance ID, and require explicit approval before any mutating operation.

What this means

The agent may act with the permissions of the configured Alibaba Cloud AccessKey or credentials profile.

Why it was flagged

The skill expects Alibaba Cloud account credentials, including a local credentials file fallback. This is normal for an Alibaba Cloud management skill, but it grants delegated cloud authority and is not declared in the registry metadata.

Skill content
Environment variables (preferred):`ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID` ... Standard credentials file:`~/.alibabacloud/credentials`
Recommendation

Provide a dedicated least-privilege RAM user or role limited to the required RDS AI/Supabase actions and avoid broad administrator credentials.

What this means

Saved evidence files could expose infrastructure details or sensitive configuration if shared or retained carelessly.

Why it was flagged

The skill asks the agent to persist outputs and API response summaries. For cloud/database administration, those files may include instance IDs, endpoints, configuration values, or other sensitive operational details.

Skill content
Save artifacts, command outputs, and API response summaries under `output/aliyun-rds-supabase/`.
Recommendation

Review and redact saved outputs before sharing them, and avoid writing passwords, AccessKeys, secret keys, or private certificate material to evidence files.