Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Alibaba Cloud DataWorks helper that uses expected cloud commands and local safety scripts for semantic job workflows.
Install this only if you intend to let an agent use your active Aliyun CLI profile for DataWorks semantic jobs. Review the cloud permissions, because create/run can consume compute, kill can stop a run, and downloads may contain sensitive result artifacts.
The skill clearly instructs reading local reference files and using network-capable CLI/API operations, but the metadata does not declare corresponding permissions. That mismatch weakens policy enforcement and user transparency, because a host may invoke a skill with more effective capability than its manifest communicates.
The activation text is intentionally expansive: it claims the skill should be used for nearly any DataWorks semantic-related request, including preflight checks, refusals, disambiguation, and even no-API-call outcomes. Overbroad routing can cause unintended invocation in adjacent contexts, exposing credentials, filesystem paths, or state-changing workflows to a skill that should not have been selected.
No suspicious patterns detected.
