by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it is an instruction-only DataWorks metadata helper that uses the Aliyun CLI and does not request unrelated credentials or installs, though it can perform both read and write metadata operations using the user's existing CLI credentials.
评估建议
This skill is coherent for inspecting and managing DataWorks metadata via the Aliyun CLI. Before installing or invoking it: 1) ensure you have the official aliyun CLI >=3.3.1 and the dataworks-public plugin; 2) run it with a CLI profile that has only the necessary RAM permissions (use the Read-Only policy if you only need browsing); 3) be cautious with write commands (create/update/delete lineage, datasets, meta-collections) — confirm parameters and intended profile before execution; 4) never pa...详细分析 ▾
✓ 用途与能力
The name/description match the instructions: all commands are aliased to the Aliyun CLI dataworks-public plugin and cover browsing, lineage, dataset, and meta-collection operations. Nothing requested (no env vars, no installs) is disproportionate to a CLI-driven DataWorks metadata skill.
ℹ 指令范围
The SKILL.md stays within the stated domain and only instructs running aliyun dataworks-public commands. It includes both read and write operations (e.g., UpdateTableBusinessMetadata, UpdateColumnBusinessMetadata, Create/Delete lineage, Create/Delete dataset/meta-collection). These write actions are expected for a full management skill but require the user to confirm parameters and be deliberate about which CLI profile is used.
✓ 安装机制
No install spec or third-party downloads are present; the skill is instruction-only and relies on the user having the Aliyun CLI and the official dataworks-public plugin installed. This is low-risk from an installation perspective.
ℹ 凭证需求
The skill declares no environment variables or primary credential and correctly relies on the user's configured Aliyun CLI profile (aliyun configure). That is proportionate, but users should be aware the CLI will use whatever AK/SK/profile is configured locally — the skill will execute commands with those credentials.
✓ 持久化与权限
No elevated persistence flags (always:false). The skill is user-invocable and does not request modification of other skills or system-wide agent settings; it does not persist credentials or make itself always-on.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.0.1-beta.12026/4/13
Initial beta release of DataWorks metadata skill for Alibaba Cloud. - Enables browsing and management of DataWorks metadata: catalogs, databases, tables, columns, partitions, datasets, versions, and metadata collections via Aliyun CLI. - Provides commands for data lineage analysis, metadata collection operations, and business metadata updates. - Includes comprehensive prerequisites and parameter rules to ensure secure and correct operation. - Supports triggers such as "dataworks metadata", "data lineage", "catalog", "table info", and more.
● 无害
安装命令
点击复制官方npx clawhub@latest install alibabacloud-dataworks-metadata
镜像加速npx clawhub@latest install alibabacloud-dataworks-metadata --registry https://cn.longxiaskill.com