ClawHub
Back to skill

Security audit

alibabacloud-dataworks-semantic

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Alibaba Cloud DataWorks helper that uses expected cloud commands and local safety scripts for semantic job workflows.

Install this only if you intend to let an agent use your active Aliyun CLI profile for DataWorks semantic jobs. Review the cloud permissions, because create/run can consume compute, kill can stop a run, and downloads may contain sensitive result artifacts.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill clearly instructs reading local reference files and using network-capable CLI/API operations, but the metadata does not declare corresponding permissions. That mismatch weakens policy enforcement and user transparency, because a host may invoke a skill with more effective capability than its manifest communicates.

Vague Triggers

Medium
Confidence
79% confidence
Finding
The activation text is intentionally expansive: it claims the skill should be used for nearly any DataWorks semantic-related request, including preflight checks, refusals, disambiguation, and even no-API-call outcomes. Overbroad routing can cause unintended invocation in adjacent contexts, exposing credentials, filesystem paths, or state-changing workflows to a skill that should not have been selected.

Static analysis

No suspicious patterns detected.