Security audit
Security checks for vulnerabilities and agentic risk
The skill is a mostly coherent Alibaba Cloud RDS Supabase admin helper, but it exposes powerful database, security, password, and custom-agent changes without strong guardrails.
Install only if you intend to let an agent administer Alibaba Cloud RDS Supabase resources. Use a least-privilege RAM role, specify region and instance IDs explicitly, and require human confirmation before delete, password reset, SSL, IP whitelist, auth, storage credential, or custom-agent changes.
Password reset is a highly sensitive operation that can immediately revoke existing access, disrupt dependent applications, and create account recovery or incident-response issues if triggered unintentionally. The skill lists reset-password capability without a dedicated warning, confirmation requirement, or guidance to validate ownership and downstream impact first.
The skill enables destructive and security-sensitive actions such as creating, deleting, restarting instances, modifying auth, SSL, IP whitelist, and resetting passwords, but it does not present a prominent user-facing warning about irreversible changes, service disruption, or access loss. In an agent setting, this increases the risk of unsafe execution from ambiguous prompts or operator misunderstanding.
This markdown file documents parameters such as database and dashboard passwords, which can affect user data and system security, but provides no warning about secure handling, storage, or exposure of these values. Under the markdown-specific warning criteria, the omission is notable because the file presents sensitive inputs as routine parameters without any cautionary disclosure.
The documentation explicitly lists access key fields such as AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY, which are sensitive credentials, but does not warn users about the risks of disclosure or misuse. For a markdown reference that surfaces credential-bearing parameters, some user-facing caution is expected to prevent unsafe handling.
The markdown describes ModifyInstanceIpWhitelist, including destructive modes like Cover and Delete, but gives no warning that modifying the whitelist can immediately affect connectivity and security posture. This omission matters because the behavior can impact system integrity and user access.
The file documents SSLEnabled and custom certificate fields but does not warn that turning SSL off or providing incorrect certificate material can compromise secure communications. For markdown documentation covering security-affecting settings, a brief caution is warranted.
ResetInstancePassword changes authentication credentials and can disrupt existing access, but the reference presents it without any caution about operational impact or secret handling. In markdown skill documentation, actions affecting authentication should include a warning about sensitivity and coordination needs.
The reference documents custom-agent creation, update, listing, and deletion capabilities that are broader than the stated skill scope of managing RDS Supabase instances. This scope mismatch can mislead downstream agents or users into invoking powerful agent-management APIs they did not expect, increasing the risk of unauthorized prompt/tool changes, persistence, or lateral capability expansion.
The guidance recommends using ambient Alibaba Cloud credentials and, when no region is specified, querying across all regions to enumerate instances. In an agent skill, this can cause account-wide asset discovery and disclosure beyond the user's intended scope, especially if the agent proceeds automatically without explicit confirmation or least-privilege scoping.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
官方文档来源（用于后续更新）
============================
- https://api.aliyun.com/document/RdsAi/2025-05-07/overview
- https://www.alibabacloud.com/help/zh/rds/apsaradb-rds-for-postgresql/api-rdsai-2025-05-07-overview-postgresql
- https://www.alibabacloud.com/help/zh/rds/apsaradb-rds-for-postgresql/api-rdsai-2025-05-07-dir-postgresql/
- https://www.alibabacloud.com/help/zh/rds/apsaradb-rds-for-postgresql/supabase/
The file title and entire document are presented only in Chinese, which can indicate a language-specific constraint without any user opt-in or explanation of regional scope. Under the policy, language/locale restrictions should either offer a choice or be clearly documented as justified for a specific region or audience.
The file presents all user-facing guidance in Chinese and does not mention that the language is configurable or restricted to a specific locale. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless clearly documented and justified.
This markdown file begins with a Chinese-only heading and all listed documentation links are Chinese-language sources, but there is no natural-language indication that the skill is intentionally region-specific or that users may choose another language. That can violate the language/locale policy when a specific language is imposed without opt-in or justification.
No suspicious patterns detected.