Skip to main content

data-catalog

Manages metadata for data assets, enabling discovery, governance, and lineage tracking in data engineering workflows.

Install this skill

or
51/100

Security score

The data-catalog skill was audited on Mar 1, 2026 and we found 9 security issues across 4 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 62

Python subprocess execution

SourceSKILL.md
62subprocess.run(["dcatalog", "register", "--asset-name", "test"], check=True)
medium line 63

Python subprocess execution

SourceSKILL.md
63except subprocess.CalledProcessError as e:
high line 43

Curl to non-GitHub URL

SourceSKILL.md
43- POST /api/v1/assets: Create a new asset. Example curl: `curl -H "Authorization: Bearer $DATA_CATALOG_API_KEY" -d '{"name": "sales_data", "tags": ["metadata"]}' -X POST https://api.opencclaw.com/api/
high line 44

Curl to non-GitHub URL

SourceSKILL.md
44- GET /api/v1/assets/search?query=sales: Search assets. Example: `curl -H "Authorization: Bearer $DATA_CATALOG_API_KEY" https://api.opencclaw.com/api/v1/assets/search?query=sales`
medium line 52

Access to hidden dotfiles in home directory

SourceSKILL.md
52Config formats are JSON-based, e.g., for CLI config file (`~/.dcatalog/config.json`):
low line 43

External URL reference

SourceSKILL.md
43- POST /api/v1/assets: Create a new asset. Example curl: `curl -H "Authorization: Bearer $DATA_CATALOG_API_KEY" -d '{"name": "sales_data", "tags": ["metadata"]}' -X POST https://api.opencclaw.com/api/
low line 44

External URL reference

SourceSKILL.md
44- GET /api/v1/assets/search?query=sales: Search assets. Example: `curl -H "Authorization: Bearer $DATA_CATALOG_API_KEY" https://api.opencclaw.com/api/v1/assets/search?query=sales`
low line 49

External URL reference

SourceSKILL.md
49response = requests.put('https://api.opencclaw.com/api/v1/lineage', headers=headers, json={"source": "raw_data", "target": "report"})
low line 53

External URL reference

SourceSKILL.md
53`{"default_tags": ["data-governance"], "api_endpoint": "https://api.opencclaw.com"}`
Scanned on Mar 1, 2026
View Security Dashboard
Installation guide →