dataworks-open-api
Enables dynamic API discovery and management of Alibaba Cloud DataWorks resources using official SDKs for data operations.
Install this skill
Security score
The dataworks-open-api skill was audited on May 13, 2026 and we found 21 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 50 | 7. **Browser** — use browser-use to visit the DataWorks Homepage (`https://dataworks.data.aliyun.com/${ALIBABA_CLOUD_REGION_ID}/#/index`) and inspect the UI behavior, network requests, or page content |
Template literal with variable interpolation in command context
| 126 | endpoint: `dataworks.${ |
Access to hidden dotfiles in home directory
| 56 | 3. Shared config file: `~/.alibabacloud/credentials` |
Access to .env file
| 124 | accessKeyId: process.env.ALIBABA_CLOUD_ACCESS_KEY_ID, |
Access to .env file
| 125 | accessKeySecret: process.env.ALIBABA_CLOUD_ACCESS_KEY_SECRET, |
Access to .env file
| 127 | process.env.ALIBABA_CLOUD_REGION_ID || "cn-shanghai" |
Access to .env file
| 174 | accessKeyId: process.env.ALIBABA_CLOUD_ACCESS_KEY_ID, |
Access to .env file
| 175 | accessKeySecret: process.env.ALIBABA_CLOUD_ACCESS_KEY_SECRET, |
External URL reference
| 39 | `https://help.aliyun.com/zh/dataworks/developer-reference/api-dataworks-public-2024-05-18-dir` |
External URL reference
| 40 | Browse the category list, find the matching API name, and navigate to its detail page (URL pattern: `https://help.aliyun.com/zh/dataworks/developer-reference/api-dataworks-public-2024-05-18-{apinamein |
External URL reference
| 41 | For example, if `CreateNode` fails, find it under "数据开发（新版）" in the directory, then read its detail page: `https://help.aliyun.com/zh/dataworks/developer-reference/api-dataworks-public-2024-05-18-crea |
External URL reference
| 45 | - Java: `https://aliyunsdk-pages.alicdn.com/apidocs/{PRODUCT_CODE}/{API_VERSION}/java-async-tea/8.0.3/index.html` |
External URL reference
| 50 | 7. **Browser** — use browser-use to visit the DataWorks Homepage (`https://dataworks.data.aliyun.com/${ALIBABA_CLOUD_REGION_ID}/#/index`) and inspect the UI behavior, network requests, or page content |
External URL reference
| 55 | 2. Credentials URI: `ALIBABA_CLOUD_CREDENTIALS_URI` (e.g. `http://localhost:7002/api/v1/credentials/0`). The SDK credentials provider automatically fetches and refreshes AK/SK/STS tokens from this HTT |
External URL reference
| 78 | This fetches `https://help.aliyun.com/zh/dataworks/developer-reference/api-{PRODUCT_CODE}-{API_VERSION}-overview`, extracts the API list from `window.__ICE_PAGE_PROPS__.docDetailData.storeData.data.co |
External URL reference
| 88 | This calls `https://next.api.aliyun.com/meta/v1/products/{PRODUCT_CODE}/versions/{API_VERSION}/api-docs.json` and outputs the full API docs JSON and a summary list. |
External URL reference
| 93 | https://next.api.aliyun.com/meta/v1/products/{PRODUCT_CODE}/versions/{API_VERSION}/apis/{ApiName}/api.json |
External URL reference
| 98 | If the MCP Server is running, use the MCP `tools/list` capability, or fetch `https://dataworks.data.aliyun.com/pop-mcp-tools` directly for the tool catalog JSON. Includes some APIs not in Method 2 (e. |
External URL reference
| 104 | - Node.js: `https://www.npmjs.com/package/@alicloud/dataworks-public20240518` |
External URL reference
| 106 | - Java: `https://central.sonatype.com/artifact/com.aliyun/alibabacloud-dataworks_public20240518` |
External URL reference
| 242 | Java SDK API docs: `https://aliyunsdk-pages.alicdn.com/apidocs/{PRODUCT_CODE}/{API_VERSION}/java-async-tea/8.0.3/index.html` |