The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess to manage background worker processes for long-running data analysis tasks. It also uses it to detect and interact with notification CLIs such as openclaw or clawdbot to provide session updates to the user.
Evidence includes subprocess.Popen in scripts/cli/worker_utils.py and scripts/cli/dual_logger.py, and subprocess.run in scripts/cli/notify.py.
[EXTERNAL_DOWNLOADS]: The skill communicates with Alibaba Cloud official endpoints (*.aliyuncs.com) to perform metadata discovery, session management, and data analysis. It also supports uploading local files to Alibaba Cloud Object Storage Service (OSS) for analysis.
Communication is performed using the requests and aiohttp libraries through official Alibaba Cloud SDK modules.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external enterprise databases and uploaded files (CSV, Excel, JSON). This data is used as context for the Data Agent's natural language processing, creating a surface for indirect prompt injection if the source data contains malicious instructions.
Ingestion points: Databases managed via DMS and files uploaded via the file subcommand.
Boundary markers: Not explicitly defined in the provided client code, though the underlying Alibaba Cloud service likely implements its own guardrails.
Capability inventory: The skill can execute SQL queries (via the Data Agent), read/write session files locally, and interact with Alibaba Cloud APIs.
Sanitization: The skill implements credential redaction for logs but relies on the backend service for sanitizing data processed during analysis.

alibabacloud-data-agent-skill