中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 0/100
Last scan:2 days ago Rescan
0 /100
alibabacloud-tablestore-agent-storage
阿里云Tablestore知识库管理技能，用于构建和管理基于Tablestore的知识库
纯文档型阿里云Tablestore知识库管理技能，无可执行代码，所有URL均为官方域名，凭证处理符合阿里云标准实践。
Skill Namealibabacloud-tablestore-agent-storage
Duration26.8s
Enginepi
✓
Safe to install
该技能安全可信，可正常使用。建议在生产环境中使用最小权限原则配置RAM角色。

Findings 3 items

Severity Finding Location
Info
纯文档型技能
该技能仅包含Markdown文档，无可执行脚本文件。所有功能说明均为文档形式存在。
Alibaba Cloud Tablestore Agent Storage Skill
→ 无需处理，继续使用
 SKILL.md:1
Info
敏感文件为标准文档
references/credentials.md 被标记为敏感，但内容仅为阿里云官方凭证配置指南（非泄露凭证）
Using the Default Credential Chain (Recommended)
→ 该文件为标准凭证配置文档，无需担心
 references/credentials.md:1
Info
凭证安全声明完善
SKILL.md 明确禁止直接询问用户明文AK/SK，并强调通过后端代码处理密钥
Never ask the user for plaintext AK/SK
→ 安全实践良好
 SKILL.md:244
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — 无脚本，仅文档说明文件路径约定
Network READ READ ✓ Aligned 仅连接阿里云官方API端点
Shell NONE NONE — 无shell执行代码，仅文档引用pip/CLI命令
41 findings
🔗
Medium External URL 外部 URL
https://pypi.tuna.tsinghua.edu.cn/simple
SKILL.md:100
🔗
Medium External URL 外部 URL
http://ots-cn-hangzhou.aliyuncs.com
SKILL.md:142
🔗
Medium External URL 外部 URL
https://ram.console.aliyun.com/authorize?request=%7B%22payloads%22%3A%5B%7B%22missionId%22%3A%22Tablestore.RoleForOTSAcc...
SKILL.md:210
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/cli/
references/aliyun-cli-installation-guide.md:3
🔗
Medium External URL 外部 URL
https://aliyuncli.alicdn.com/install.sh
references/aliyun-cli-installation-guide.md:16
🔗
Medium External URL 外部 URL
https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz
references/aliyun-cli-installation-guide.md:29
🔗
Medium External URL 外部 URL
https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-arm64.tgz
references/aliyun-cli-installation-guide.md:32
🔗
Medium External URL 外部 URL
https://aliyuncli.alicdn.com/aliyun-cli-latest.pkg
references/aliyun-cli-installation-guide.md:48
🔗
Medium External URL 外部 URL
https://mirrors.ustc.edu.cn/brew.git
references/aliyun-cli-installation-guide.md:61
🔗
Medium External URL 外部 URL
https://mirrors.ustc.edu.cn/homebrew-core.git
references/aliyun-cli-installation-guide.md:62
🔗
Medium External URL 外部 URL
https://mirrors.ustc.edu.cn/homebrew-bottles
references/aliyun-cli-installation-guide.md:63
🔗
Medium External URL 外部 URL
https://mirrors.ustc.edu.cn/homebrew-bottles/api
references/aliyun-cli-installation-guide.md:64
🔗
Medium External URL 外部 URL
https://aliyuncli.alicdn.com/aliyun-cli-macosx-latest-universal.tgz
references/aliyun-cli-installation-guide.md:78
🔗
Medium External URL 外部 URL
https://aliyuncli.alicdn.com/aliyun-cli-windows-latest-amd64.zip
references/aliyun-cli-installation-guide.md:95
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/cli/install-cli-on-linux
references/aliyun-cli-installation-guide.md:170
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/cli/install-cli-on-macos
references/aliyun-cli-installation-guide.md:171
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/cli/install-cli-on-windows
references/aliyun-cli-installation-guide.md:172
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/sdk/developer-reference/v2-manage-python-access-credentials
references/credentials.md:144
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/cli/configure-credentials
references/credentials.md:145
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/oss/developer-reference/ossutil-overview/
references/ossutil-installation-guide.md:3
🔗
Medium External URL 外部 URL
https://gosspublic.alicdn.com/ossutil/v2/2.2.1/ossutil-2.2.1-linux-amd64.zip
references/ossutil-installation-guide.md:27
🔗
Medium External URL 外部 URL
https://gosspublic.alicdn.com/ossutil/v2/2.2.1/ossutil-2.2.1-linux-arm64.zip
references/ossutil-installation-guide.md:36
🔗
Medium External URL 外部 URL
https://gosspublic.alicdn.com/ossutil/install.sh
references/ossutil-installation-guide.md:46
🔗
Medium External URL 外部 URL
https://gosspublic.alicdn.com/ossutil/v2/2.2.1/ossutil-2.2.1-mac-arm64.zip
references/ossutil-installation-guide.md:63
🔗
Medium External URL 外部 URL
https://gosspublic.alicdn.com/ossutil/v2/2.2.1/ossutil-2.2.1-mac-amd64.zip
references/ossutil-installation-guide.md:72
🔗
Medium External URL 外部 URL
https://oss-cn-hangzhou.aliyuncs.com
references/ossutil-installation-guide.md:117
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/oss/developer-reference/install-ossutil
references/ossutil-installation-guide.md:192
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/oss/developer-reference/configure-ossutil
references/ossutil-installation-guide.md:193
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/oss/developer-reference/ossutil
references/ossutil-installation-guide.md:194
🔗
Medium External URL 外部 URL
https://ram.console.aliyun.com/policies
references/ram-policies.md:24
🔗
Medium External URL 外部 URL
https://ram.console.aliyun.com/users
references/ram-policies.md:27
🔗
Medium External URL 外部 URL
https://ram.console.aliyun.com/
references/ram-policies.md:156
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/developer-reference/overview-of-ram
references/ram-policies.md:157
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/oss/developer-reference/overview-of-ram
references/ram-policies.md:158
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/developer-reference/tablestore-cli
references/tablestore-cli-installation-guide.md:3
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/developer-reference/download-the-tablestore-cli
references/tablestore-cli-installation-guide.md:15
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/developer-reference/tablestore-cli/start-and-configure-access-information
references/tablestore-cli-installation-guide.md:141
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/developer-reference/activate-tablestore-service
references/tablestore-instance.md:7
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/product-overview/instance
references/tablestore-instance.md:31
🔗
Medium External URL 外部 URL
https://help.aliyun.com/zh/tablestore/product-overview/endpoints
references/tablestore-instance.md:32
🔗
Medium External URL 外部 URL
http://myinstance.cn-hangzhou.ots.aliyuncs.com
references/tablestore-instance.md:138

File Tree

8 files · 56.3 KB · 1814 lines
Markdown 8f · 1814L
├─ ▾ 📁 references
│ ├─ 📝 aliyun-cli-installation-guide.md Markdown 172L · 4.3 KB
│ ├─ 🔑 credentials.md ⚠ Markdown 146L · 4.9 KB
│ ├─ 📝 metadata.md Markdown 319L · 10.1 KB
│ ├─ 📝 ossutil-installation-guide.md Markdown 194L · 5.2 KB
│ ├─ 📝 ram-policies.md Markdown 158L · 5.8 KB
│ ├─ 📝 tablestore-cli-installation-guide.md Markdown 141L · 3.6 KB
│ └─ 📝 tablestore-instance.md Markdown 187L · 4.6 KB
└─ 📝 SKILL.md Markdown 497L · 17.9 KB

Dependencies 2 items

PackageVersionSourceKnown VulnsNotes
tablestore-agent-storage 1.0.4 pip No 已锁定版本
alibabacloud_credentials latest pip No 阿里云官方凭证SDK

Security Positives

✓ 纯文档型技能，无执行风险
✓ 所有URL均为阿里云官方域名(pypi.org, aliyuncs.com, aliyun.com)
✓ 明确禁止明文凭证暴露（'Never ask the user for plaintext AK/SK'）
✓ 使用官方SDK（tablestore-agent-storage）而非自定义HTTP调用
✓ 支持多种安全凭证方式（RamRoleArn, ECS RAM Role, OIDC）
✓ 明确禁止删除操作（delete_documents等），降低误操作风险
✓ 文档结构清晰，步骤分解合理