ClawHub
Back to skill

Security audit

alibabacloud-dataworks-data-agent

Security checks across malware telemetry and agentic risk

Overview

This skill is a scoped Alibaba Cloud DataWorks assistant that sends user-directed prompts and optional user files to DataWorks for analysis, with no hidden install scripts or credential scraping found.

Install only if you intend to use Alibaba Cloud DataWorks Data Agent through your aliyun CLI profile. Do not attach secrets, credential files, personal data, or regulated business data unless you are authorized to send it to Alibaba Cloud for processing; review file paths before using file:// attachments.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The file-attachment example encourages sending a local file URI to a remote DataWorks agent without warning that the file contents will leave the local environment. In an agent setting, this omission can cause users to attach sensitive local data unintentionally, especially because the example normalizes direct use of local paths in prompts.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The reference explicitly documents sending arbitrary user text and local file URIs to a remote cloud API, but provides no privacy warning, consent guidance, or constraints on sensitive data handling. In a skill designed for conversational data analysis, this increases the risk of inadvertent exfiltration of local file contents, dataset identifiers, or confidential prompts to an external service.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The example instructs users to send a local file via a file:// URI to a remote Data Agent without any warning that the file contents leave the local environment. In a data-analysis skill, attached files may contain sensitive business data, so omission of an explicit disclosure/consent warning can lead to unintended exfiltration of confidential information.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.