setup
Guides users in creating and validating their credentials.local file for connecting to Alation in various environments.
Install this skill
or
82/100
Security score
The setup skill was audited on Jun 3, 2026 and we found 4 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 61
Prompting for password/secret input
SourceSKILL.md
| 61 | **Username/password** — ask for: `base_url`, `username`, and `password`. |
low line 52
External URL reference
SourceSKILL.md
| 52 | - **OAuth (recommended):** Browser-based login using Authorization Code + PKCE. Requires an OAuth client registered in Alation with redirect URI `http://127.0.0.1:18722/callback`. |
low line 115
External URL reference
SourceSKILL.md
| 115 | The `--code` flag accepts either a bare authorization code or a full redirect URL (e.g., `http://127.0.0.1:18722/callback?code=ABC&state=XYZ`). |
low line 119
External URL reference
SourceSKILL.md
| 119 | **Note:** An Alation admin must register `http://127.0.0.1:18722/callback` as an allowed redirect URI for the OAuth client. |
Scanned on Jun 3, 2026
View Security Dashboard