TDengine Setup

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward TDengine installer, but it runs installer scripts and enables a system service, so users should review the commands before use.

Install only on a Linux host where you intend to run TDengine. Verify the vendor download, do not run an unexpected ./scripts/install.sh from another directory, and confirm you are comfortable enabling the taosd service to persist across reboots.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

A user may install software obtained from the network, so they should ensure the download source is correct and trusted.

Why it was flagged

The installer is downloaded from an external vendor URL. That is expected for a setup skill, but the artifact does not provide checksum or signature verification instructions.

Skill content

地址: `https://www.taosdata.com/assets-download/TDengine-server-3.3.6.0-Linux-x64.tar.gz`

Recommendation

Verify the TDengine download URL and, if available, compare vendor-provided checksums or signatures before running the installer.

Low

#ASI05: Unexpected Code Execution

What this means

Running the installer can modify the local system and install services.

Why it was flagged

The skill instructs execution of an installer script from the extracted package. This is central to installing TDengine, but it is still local code execution with system-changing effects.

Skill content

tar -xzvf TDengine-server-3.3.6.0-Linux-x64.tar.gz
cd TDengine-server-3.3.6.0
./install.sh

Recommendation

Run the installer only on the intended machine and only after confirming the package source is trusted.

Low

#ASI03: Identity and Privilege Abuse

What this means

The setup may require admin-level control over the host and can affect system services.

Why it was flagged

Starting and enabling a system service usually requires administrative privileges. This is aligned with installing a database server, but users should understand the privilege boundary.

Skill content

systemctl start taosd
systemctl enable taosd

Recommendation

Use administrative privileges only on systems where you intend to install and run TDengine.

Low

#ASI10: Rogue Agents

What this means

TDengine may continue running after installation and after system restarts.

Why it was flagged

The command enables the TDengine daemon to start automatically on boot. This persistence is disclosed and expected for a database service.

Skill content

systemctl enable taosd

Recommendation

Confirm you want a persistent TDengine service; disable or stop taosd if it is not needed.