Skip to main content

dataworks-open-api

Enables dynamic API discovery and management of Alibaba Cloud DataWorks resources using official SDKs for data operations.

Install this skill

or
63/100

Security score

The dataworks-open-api skill was audited on Mar 12, 2026 and we found 15 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 30

Template literal with variable interpolation in command context

SourceSKILL.md
306. **Browser** — use browser-use to visit the DataWorks Homepage (`https://dataworks.data.aliyun.com/${ALICLOUD_REGION_ID}/#/index`) and inspect the UI behavior, network requests, or page content for
medium line 98

Template literal with variable interpolation in command context

SourceSKILL.md
98endpoint: `dataworks.${
medium line 36

Access to hidden dotfiles in home directory

SourceSKILL.md
362. Shared config file: `~/.alibabacloud/credentials`
low line 96

Access to .env file

SourceSKILL.md
96accessKeyId: process.env.ALICLOUD_ACCESS_KEY_ID,
low line 97

Access to .env file

SourceSKILL.md
97accessKeySecret: process.env.ALICLOUD_ACCESS_KEY_SECRET,
low line 99

Access to .env file

SourceSKILL.md
99process.env.ALICLOUD_REGION_ID || "cn-shanghai"
low line 146

Access to .env file

SourceSKILL.md
146accessKeyId: process.env.ALICLOUD_ACCESS_KEY_ID,
low line 147

Access to .env file

SourceSKILL.md
147accessKeySecret: process.env.ALICLOUD_ACCESS_KEY_SECRET,
low line 25

External URL reference

SourceSKILL.md
25- Java: `https://aliyunsdk-pages.alicdn.com/apidocs/{PRODUCT_CODE}/{API_VERSION}/java-async-tea/8.0.3/index.html`
low line 30

External URL reference

SourceSKILL.md
306. **Browser** — use browser-use to visit the DataWorks Homepage (`https://dataworks.data.aliyun.com/${ALICLOUD_REGION_ID}/#/index`) and inspect the UI behavior, network requests, or page content for
low line 56

External URL reference

SourceSKILL.md
56This fetches `https://help.aliyun.com/zh/dataworks/developer-reference/api-{PRODUCT_CODE}-{API_VERSION}-overview`, extracts the API list from `window.__ICE_PAGE_PROPS__.docDetailData.storeData.data.co
low line 66

External URL reference

SourceSKILL.md
66This calls `https://next.api.aliyun.com/meta/v1/products/{PRODUCT_CODE}/versions/{API_VERSION}/api-docs.json` and outputs the full API docs JSON and a summary list.
low line 71

External URL reference

SourceSKILL.md
71https://next.api.aliyun.com/meta/v1/products/{PRODUCT_CODE}/versions/{API_VERSION}/apis/{ApiName}/api.json
low line 76

External URL reference

SourceSKILL.md
76If the MCP Server is running, use the MCP `tools/list` capability, or fetch `https://dataworks.data.aliyun.com/pop-mcp-tools` directly for the tool catalog JSON. Includes some APIs not in Method 2 (e.
low line 214

External URL reference

SourceSKILL.md
214Java SDK API docs: `https://aliyunsdk-pages.alicdn.com/apidocs/{PRODUCT_CODE}/{API_VERSION}/java-async-tea/8.0.3/index.html`
Scanned on Mar 12, 2026
View Security Dashboard