alibabacloud-emr-starrocks-assistant

SUSPICIOUS. The skill is largely coherent with its stated StarRocks ops purpose and uses direct FE connections rather than off-platform proxies, but it relies on bundled/private CLI tooling that is not publicly verifiable and stores credentials locally. The biggest security concern is credential/query handling through unverifiable local tooling plus explicit no-TLS connections; this raises security risk even though the behavior is not clearly malicious.