Scanned skills

aliyun/alibabacloud-aiops-skills alibabacloud-dataworks-datastudio-develop

Checked the catalogued skill at alibabacloud-dataworks-datastudio-develop.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 69
F Security

F; retained sample includes a critical finding · SD-009 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 69
securityhigh SD-007
SKILL.md
securitycritical SD-009
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
assets/templates/05-cycle-workflow/_deploy.md
permission_hygienehigh SD-003
assets/templates/05-cycle-workflow/_deploy.md
permission_hygienehigh SD-003
assets/templates/05-cycle-workflow/_deploy.md
permission_hygienehigh SD-003
assets/templates/05-cycle-workflow/_deploy.md
permission_hygienehigh SD-003
assets/templates/07-parallel-workflow/_deploy.md
permission_hygienehigh SD-003
assets/templates/07-parallel-workflow/_deploy.md
8 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/api/CreateComponent.md

The absolute path is shown only in a documentation example, not in executable code; it poses no real threat.

permission_hygienehigh SD-003 benign_example
references/api/CreateFunction.md

Example path in documentation, not actual code execution

permission_hygienehigh SD-003 benign_example
references/api/CreateResource.md

Example documentation shows an absolute path but does not execute or read files in real context.

permission_hygienehigh SD-003 benign_example
references/api/ImportWorkflowDefinition.md

The absolute path is part of example documentation, not executable code

permission_hygienehigh SD-003 benign_example
references/api/UpdateComponent.md

Example usage of absolute path in documentation, not actual code execution.

permission_hygienehigh SD-003 benign_example
references/api/UpdateFunction.md

The path is only used as a documentation example, not executed by the skill.

permission_hygienehigh SD-003 benign_example
references/api/UpdateNode.md

The path is an example for users to supply a local file; it is not part of executable code that could lead to a real path traversal vulnerability.

permission_hygienehigh SD-003 benign_example
references/api/UpdateWorkflowDefinition.md

Documentation example uses absolute path for illustration, not an actual vulnerability