Alibabacloud Dataworks Data Quality
v0.0.1-beta.1DataWorks Data Quality (Read-Only): Query rule templates, data quality monitors (scans), alert rules, and scan run records/logs. Uses aliyun CLI to call data...
⭐ 0· 40·0 current·0 all-time
byalibabacloud-skills-team@sdk-team
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md clearly states the purpose (read-only DataWorks Data Quality queries) and uses the aliyun CLI to call the DataWorks OpenAPI — this is consistent. However, the registry metadata lists no required binaries/env yet the runtime instructions require aliyun CLI >= 3.3.1 and recommend jq; that metadata omission is an inconsistency and should be corrected.
Instruction Scope
Instructions are narrowly scoped to read-only List/Get APIs, require explicit ProjectId/Id/region confirmation, mandate time conversion, and refuse write operations. They instruct running local aliyun CLI commands (and piping output to jq). The only potential scope concern is the recommendation to run `aliyun configure set --auto-plugin-install true`, which permits the CLI to download and install plugins automatically during execution — this increases runtime network activity and introduces downloaded code not otherwise specified.
Install Mechanism
There is no install spec in the skill bundle (instruction-only). The included reference shows downloading aliyun CLI from aliyuncdn.com (official CDN) or using Homebrew — these are expected and not suspicious. Because no archive is included in the skill itself, nothing in the skill writes arbitrary code to disk by itself.
Credentials
The skill declares no required environment variables or primary credential, which matches the read-only intent. In practice the CLI will use whatever Alibaba Cloud credentials are configured locally (via `aliyun configure` or credential files). The SKILL.md explicitly warns not to echo AK/SK. Users should ensure the credentials used are least-privilege/read-only as described in the provided RAM policy examples.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or modify other skills. There is no indicaton it writes persistent agent-wide configuration beyond recommending the standard `aliyun configure` settings.
Assessment
This skill appears to do what it says (read-only DataWorks queries via the aliyun CLI), but check these before installing:
- The SKILL.md requires aliyun CLI >= 3.3.1 and (optionally) jq, yet the registry metadata lists no required binaries — ensure you have the CLI installed from Alibaba's official source or Homebrew before use.
- The instructions recommend enabling `--auto-plugin-install true` which lets the CLI download plugins on first use; if you prefer to avoid on-demand code download, install needed plugins manually and keep auto-install off.
- The skill will run local `aliyun` commands using whichever AccessKey/credentials are configured on the machine. Use a least-privilege read-only RAM policy (the provided RAM policy example is appropriate) and avoid using full-power or production keys.
- The skill is read-only and instructs the agent to block any create/update/delete requests — nonetheless, review any generated commands before they run if possible.
If you want higher assurance, ask the publisher to (1) update registry metadata to declare required binaries (aliyun, jq), (2) remove the auto-plugin-install recommendation or explain which plugins will be downloaded, and (3) provide a signed source/homepage for the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97a11pj1g087gezbp445tn3k584vyfr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.