Back to skill

Security audit

Alibabacloud Odps Sql Generation

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only MaxCompute SQL helper that does not install code, persist state, or request credentials.

Before installing, be aware that generated SQL may include MaxCompute SET options or retry suggestions that can change query cost, scope, or runtime behavior. Review generated full scans, cartesian joins, DML, timeout changes, and resource settings before running them against real data.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

The file is written as a prescriptive skill guide in Chinese and instructs the agent to read and follow it when generating queries, but it does not provide any user opt-in or alternative language handling. Under the policy, forcing a specific language or locale without user choice is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The title and core instructions are written entirely in Chinese, and the document does not indicate that another language is available or that Chinese is required for a region-specific or compliance reason. This can violate a language/locale policy when users have not opted into Chinese output.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown skill reference forces a specific language/locale for all instructions and examples, which can violate language-choice policy when no user opt-in or alternative is provided. The file does not indicate that Chinese is optional, user-selected, or required for a region-specific use case.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The title and core instructions are written entirely in Chinese, and the file does not offer any language choice or state that the locale restriction is optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.