alibabacloud-aidbs-dgate-skill

SUSPICIOUS. The skill’s stated purpose broadly matches its capabilities, and its data flows appear aimed at Alibaba’s Dgate service, but the install/execution trust story is weak: it relies on an opaque shortlink installer and a dgate CLI that could not be publicly verified with source, checksum, signature, or transparent release provenance. Because that CLI is expected to receive agent identity credentials/tokens, this is a high-risk supply-chain and credential-forwarding design even though the runtime scope is read-only.