技能 datadata-api
📦
datadata-api
內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數
查詢 Datadata 資料來源
團隊需要一種更安全的方式來檢視 Datadata 資料來源，而不必建立自訂 API 呼叫。此技能提供用於中繼資料、SQL 執行、匯出，以及 data-space 資料表管理的引導式 CLI 工作流程。
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "datadata-api" from https://skillstore.io/skills/datadata-team-datadata-api.md and its manifest at https://skillstore.io/api/skills/datadata-team-datadata-api/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「datadata-api」。 搜尋 Datadata 中的 customer 資料來源。
預期結果:
以編號清單列出符合的來源，包含名稱、擁有者、可見性與來源類型，供使用者確認。
正在使用「datadata-api」。 執行 sales 摘要查詢並擷取結果。
預期結果:
執行 ID、已儲存的檔案路徑、格式、位元組數、列數，以及建議的預覽命令。
正在使用「datadata-api」。 在我的 ducklake data space 中建立 products 資料表。
預期結果:
簡潔確認資料表已建立，接著提供下一個安全的插入或描述動作。
安全審計
高風險v4 • 2026/7/6 開啟版本化報告
The skill is Datadata-focused and I found no prompt injection or hidden payloads. Most static alerts are false positives from markdown backticks, Chinese documentation, placeholders, and Datadata resource IDs. Confirmed issues involve authenticated network use, local credential storage, API key exposure in device-flow output, broad default permissions, and local result-file writes.
7
已掃描檔案
2,698
分析行數
46
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
高
Full API Key Exposed In Device Flow Output
The device-flow completion path returns the full API key in command output, and a fallback path prints the key if saving fails. Command output can persist in logs or agent transcripts.
The code explicitly includes the key in printed output fields and fallback messages. This is direct credential disclosure, even though it occurs during a legitimate auth flow.
高
Broad Default Device Authorization Scope
The default device-flow key requests read, scan, replace-file, query execution, result access, and data-space write permissions for every authorization. Read-only workflows receive write-capable credentials.
The permission list is hardcoded and reused for both device-flow entry points. It includes write and replace-file scopes beyond many documented read-only tasks.
中
Unconstrained Result Artifact Write Path
The result download command writes to a user-supplied output path or a default path built from the execution ID. The execution ID is not sanitized before becoming part of a filesystem path.
The code joins the execution ID into a temp filename and then opens the resolved path for writing. Legitimate IDs are likely safe, but the CLI does not enforce that format.
能力複核項目 (46)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Generic API/secret keys
print(f"获取到 API Key: {api_key}")
The API reference example prints the full API key after device-flow token exchange. This can teach users or agents to leak a newly issued credential into logs or chat transcripts.
高
Hidden file in home directory
3. `~/.config/datadata/datadata-api-skills/config.json` 配置文件
The CLI documentation describes persistent API key storage under a hidden config path. The documented 0600 permission reduces exposure, but this is still sensitive filesystem behavior.
高
Hidden file in home directory
5. API Key 自动保存到 `~/.config/datadata/datadata-api-skills/config.json`(Unix 权限 0600),后续直接使用,无需重复授权
The CLI documentation describes persistent API key storage under a hidden config path. The documented 0600 permission reduces exposure, but this is still sensitive filesystem behavior.
高
Hidden file in home directory
其他: ~/.config/datadata/datadata-api-skills
The script stores Datadata authentication material under a hidden user config directory. The Unix permission hardening helps, but persistent local secret storage remains sensitive.
高
Hidden file access
其他: ~/.config/datadata/datadata-api-skills
The script stores Datadata authentication material under a hidden user config directory. The Unix permission hardening helps, but persistent local secret storage remains sensitive.
高
Python file write/append
with open(API_KEY_CONFIG_FILE, "w", encoding="utf-8") as fh:
The script stores Datadata authentication material under a hidden user config directory. The Unix permission hardening helps, but persistent local secret storage remains sensitive.
高
Python environment access
default=os.environ.get("DATADATA_API_KEY") or load_api_key_from_config() or "",
The script reads DATADATA_API_KEY from the environment and uses it for authenticated requests. Environment-based secret access is expected but sensitive.
高
Python environment access
env_key = os.environ.get("DATADATA_API_KEY")
The script reads DATADATA_API_KEY from the environment and uses it for authenticated requests. Environment-based secret access is expected but sensitive.
高
Configuration library
api_key = config.get("apiKey") if isinstance(config, dict) else None
The script reads the saved apiKey value from the local config file. This is intentional credential loading, but it handles a reusable secret.
高
Configuration library
return config.get("apiKey") if isinstance(config, dict) else None
The script reads the saved apiKey value from the local config file. This is intentional credential loading, but it handles a reusable secret.
高
Generic API/secret keys
default=os.environ.get("DATADATA_API_KEY") or load_api_key_from_config() or "",
The script reads DATADATA_API_KEY from the environment and treats it as an authentication secret. This is legitimate configuration but still secret access.
高
Generic API/secret keys
parser.add_argument("--api-key", default=global_opts.api_key)
The script accepts or handles a Datadata API key as part of its authentication flow. This is expected but security-sensitive credential handling.
高
Generic API/secret keys
if api_key:
The script places the Datadata API key into request headers for outbound HTTP calls. This is required for authentication, but it is sensitive if the base URL is misconfigured.
高
Generic API/secret keys
headers["X-Datadata-Api-key"] = api_key
The script places the Datadata API key into request headers for outbound HTTP calls. This is required for authentication, but it is sensitive if the base URL is misconfigured.
高
Generic API/secret keys
headers={"X-Datadata-Api-key": api_key, "Accept": "*/*"},
The script places the Datadata API key into request headers for outbound HTTP calls. This is required for authentication, but it is sensitive if the base URL is misconfigured.
高
Generic API/secret keys
headers={"X-Datadata-Api-key": api_key, "Accept": "*/*"},
The script places the Datadata API key into request headers for outbound HTTP calls. This is required for authentication, but it is sensitive if the base URL is misconfigured.
高
Generic API/secret keys
with open(API_KEY_CONFIG_FILE, "r", encoding="utf-8") as fh:
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
高
Generic API/secret keys
api_key = config.get("apiKey") if isinstance(config, dict) else None
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
高
Generic API/secret keys
return api_key
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
高
Generic API/secret keys
def save_api_key_to_config(api_key: str) -> None:
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
高
Generic API/secret keys
"apiKey": api_key,
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
高
Generic API/secret keys
with open(API_KEY_CONFIG_FILE, "w", encoding="utf-8") as fh:
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
高
Generic API/secret keys
api_key = result.get("key")
The device-flow path receives and stores a newly issued Datadata API key. This is expected, but it handles a fresh reusable credential.
高
Generic API/secret keys
save_api_key_to_config(api_key)
The device-flow path receives and stores a newly issued Datadata API key. This is expected, but it handles a fresh reusable credential.
高
Generic API/secret keys
print(f"✅ 授权成功!API Key: {api_key}", file=sys.stderr)
The script can print or return the full Datadata API key in command output. That exposes a reusable credential to terminal logs, chat transcripts, or command capture.
高
Generic API/secret keys
"提示:可通过 export DATADATA_API_KEY='{}' 手动设置。".format(api_key),
The script can print or return the full Datadata API key in command output. That exposes a reusable credential to terminal logs, chat transcripts, or command capture.
高
Generic API/secret keys
api_key = result.get("key")
The device-flow path receives and stores a newly issued Datadata API key. This is expected, but it handles a fresh reusable credential.
高
Generic API/secret keys
save_api_key_to_config(api_key)
The device-flow path receives and stores a newly issued Datadata API key. This is expected, but it handles a fresh reusable credential.
高
Generic API/secret keys
"key": api_key,
The script can print or return the full Datadata API key in command output. That exposes a reusable credential to terminal logs, chat transcripts, or command capture.
高
Generic API/secret keys
env_key = os.environ.get("DATADATA_API_KEY")
The script reads DATADATA_API_KEY from the environment and treats it as an authentication secret. This is legitimate configuration but still secret access.
高
Generic API/secret keys
with open(API_KEY_CONFIG_FILE, "r", encoding="utf-8") as fh:
The script reads or writes a persisted Datadata API key in the local config file. Local persistence is useful but creates a credential exposure surface.
中
Hidden file access
3. `~/.config/datadata/datadata-api-skills/config.json` 配置文件
The CLI documentation describes persistent API key storage under a hidden config path. The documented 0600 permission reduces exposure, but this is still sensitive filesystem behavior.
中
Hidden file access
5. API Key 自动保存到 `~/.config/datadata/datadata-api-skills/config.json`(Unix 权限 0600),后续直接使用,无需重复授权
The CLI documentation describes persistent API key storage under a hidden config path. The documented 0600 permission reduces exposure, but this is still sensitive filesystem behavior.
中
Python file write/append
with open(DEVICE_FLOW_STATE_FILE, "w", encoding="utf-8") as fh:
The script creates or writes Datadata config, device-flow state, or result files on disk. This is intended behavior, but it can persist sensitive data or overwrite files if misused.
中
Python file write/append
with open(path, "wb") as fh:
The script creates or writes Datadata config, device-flow state, or result files on disk. This is intended behavior, but it can persist sensitive data or overwrite files if misused.
中
Python os file operations
os.makedirs(API_KEY_CONFIG_DIR, mode=0o700, exist_ok=True)
The script creates or writes Datadata config, device-flow state, or result files on disk. This is intended behavior, but it can persist sensitive data or overwrite files if misused.
低
Python HTTP libraries
import urllib.request
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Python HTTP libraries
req = urllib.request.Request(url, data=data, headers=headers, method=method)
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Python HTTP libraries
with urllib.request.urlopen(req) as resp:
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Python HTTP libraries
req = urllib.request.Request(
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Python HTTP libraries
with urllib.request.urlopen(req) as resp:
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Python HTTP libraries
req = urllib.request.Request(
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Python HTTP libraries
with urllib.request.urlopen(req) as resp:
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Hardcoded URL
default=os.environ.get("DATADATA_BASE_URL", "https://www.datadata.com"),
The Python CLI performs real HTTP requests to the configured Datadata base URL. This is intended behavior, but it transmits queries, metadata requests, and authenticated headers over the network.
低
Temp file creation
return os.path.join(tempfile.gettempdir(), f"datadata-{execution_id}{suffix}")
The result download path is built in the system temp directory by default. This is expected for exports, but it still writes data artifacts to local storage.
低
Python environment access
default=os.environ.get("DATADATA_BASE_URL", "https://www.datadata.com"),
The script reads DATADATA_BASE_URL from the environment, which controls the remote endpoint. This is intended for configuration, but a bad value can redirect requests.
風險因素
⚙️ 外部命令 (36)
agents/openai.yaml:9 agents/openai.yaml:11 agents/openai.yaml:13 agents/openai.yaml:17 agents/openai.yaml:21 agents/openai.yaml:25 SKILL.md:12 SKILL.md:14 SKILL.md:21 SKILL.md:25 SKILL.md:29 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:57 SKILL.md:58 SKILL.md:60 SKILL.md:64 SKILL.md:79 SKILL.md:83 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:106 SKILL.md:113 SKILL.md:114 SKILL.md:115 SKILL.md:116 SKILL.md:117 SKILL.md:121 SKILL.md:125 SKILL.md:126 SKILL.md:128 SKILL.md:132 SKILL.md:133 SKILL.md:136
🌐 網路存取 (39)
agents/openai.yaml:13 references/api.md:24 references/api.md:75 references/api.md:94 references/api.md:115 references/api.md:150 references/api.md:202 references/api.md:233 references/api.md:274 references/api.md:355 references/api.md:386 references/api.md:413 references/api.md:456 references/api.md:501 references/api.md:527 references/api.md:565 references/api.md:14 references/api.md:19 references/api.md:29 references/api.md:30 references/api.md:302 references/api.md:303 references/api.md:22 references/cli.md:43 references/cli.md:59 references/cli.md:43 references/cli.md:59 references/data-spaces.md:45 scripts/datadata_query.py:14 scripts/datadata_query.py:298 scripts/datadata_query.py:300 scripts/datadata_query.py:316 scripts/datadata_query.py:322 scripts/datadata_query.py:332 scripts/datadata_query.py:338 scripts/datadata_query.py:23 scripts/datadata_query.py:1339 SKILL.md:29 SKILL.md:58
📁 檔案系統存取 (19)
references/api.md:301 references/api.md:312 references/cli.md:20 references/cli.md:33 references/cli.md:37 references/cli.md:20 references/cli.md:33 references/cli.md:37 scripts/datadata_query.py:370 scripts/datadata_query.py:370 scripts/datadata_query.py:10 scripts/datadata_query.py:827 scripts/datadata_query.py:432 scripts/datadata_query.py:459 scripts/datadata_query.py:831 scripts/datadata_query.py:391 scripts/datadata_query.py:437 scripts/datadata_query.py:443 scripts/datadata_query.py:496
🔑 環境變數 (130)
references/api.md:21 references/api.md:25 references/api.md:233 references/api.md:302 references/api.md:529 references/api.md:530 references/cli.md:10 references/cli.md:19 references/cli.md:42 references/cli.md:58 scripts/datadata_query.py:23 scripts/datadata_query.py:27 scripts/datadata_query.py:373 scripts/datadata_query.py:1152 scripts/datadata_query.py:402 scripts/datadata_query.py:407 scripts/datadata_query.py:1178 scripts/datadata_query.py:27 scripts/datadata_query.py:33 scripts/datadata_query.py:179 scripts/datadata_query.py:181 scripts/datadata_query.py:186 scripts/datadata_query.py:191 scripts/datadata_query.py:196 scripts/datadata_query.py:206 scripts/datadata_query.py:210 scripts/datadata_query.py:213 scripts/datadata_query.py:220 scripts/datadata_query.py:231 scripts/datadata_query.py:239 scripts/datadata_query.py:252 scripts/datadata_query.py:260 scripts/datadata_query.py:267 scripts/datadata_query.py:275 scripts/datadata_query.py:282 scripts/datadata_query.py:289 scripts/datadata_query.py:293 scripts/datadata_query.py:294 scripts/datadata_query.py:315 scripts/datadata_query.py:318 scripts/datadata_query.py:331 scripts/datadata_query.py:334 scripts/datadata_query.py:360 scripts/datadata_query.py:363 scripts/datadata_query.py:381 scripts/datadata_query.py:382 scripts/datadata_query.py:385 scripts/datadata_query.py:390 scripts/datadata_query.py:391 scripts/datadata_query.py:394 scripts/datadata_query.py:397 scripts/datadata_query.py:402 scripts/datadata_query.py:403 scripts/datadata_query.py:414 scripts/datadata_query.py:415 scripts/datadata_query.py:420 scripts/datadata_query.py:423 scripts/datadata_query.py:429 scripts/datadata_query.py:432 scripts/datadata_query.py:437 scripts/datadata_query.py:440 scripts/datadata_query.py:443 scripts/datadata_query.py:501 scripts/datadata_query.py:506 scripts/datadata_query.py:567 scripts/datadata_query.py:579 scripts/datadata_query.py:586 scripts/datadata_query.py:600 scripts/datadata_query.py:601 scripts/datadata_query.py:603 scripts/datadata_query.py:605 scripts/datadata_query.py:608 scripts/datadata_query.py:611 scripts/datadata_query.py:614 scripts/datadata_query.py:623 scripts/datadata_query.py:638 scripts/datadata_query.py:646 scripts/datadata_query.py:696 scripts/datadata_query.py:697 scripts/datadata_query.py:709 scripts/datadata_query.py:710 scripts/datadata_query.py:718 scripts/datadata_query.py:780 scripts/datadata_query.py:795 scripts/datadata_query.py:809 scripts/datadata_query.py:816 scripts/datadata_query.py:818 scripts/datadata_query.py:849 scripts/datadata_query.py:850 scripts/datadata_query.py:863 scripts/datadata_query.py:883 scripts/datadata_query.py:890 scripts/datadata_query.py:899 scripts/datadata_query.py:911 scripts/datadata_query.py:963 scripts/datadata_query.py:975 scripts/datadata_query.py:983 scripts/datadata_query.py:1000 scripts/datadata_query.py:1005 scripts/datadata_query.py:1008 scripts/datadata_query.py:1032 scripts/datadata_query.py:1047 scripts/datadata_query.py:1097 scripts/datadata_query.py:1100 scripts/datadata_query.py:1107 scripts/datadata_query.py:1126 scripts/datadata_query.py:1143 scripts/datadata_query.py:1145 scripts/datadata_query.py:1148 scripts/datadata_query.py:1149 scripts/datadata_query.py:1152 scripts/datadata_query.py:1153 scripts/datadata_query.py:1157 scripts/datadata_query.py:1162 scripts/datadata_query.py:1176 scripts/datadata_query.py:1221 scripts/datadata_query.py:1222 scripts/datadata_query.py:1224 scripts/datadata_query.py:1228 scripts/datadata_query.py:1271 scripts/datadata_query.py:1279 scripts/datadata_query.py:1310 scripts/datadata_query.py:1328 scripts/datadata_query.py:1342 scripts/datadata_query.py:1348 scripts/datadata_query.py:1349 scripts/datadata_query.py:1355 scripts/datadata_query.py:1358 scripts/datadata_query.py:1362 SKILL.md:57
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/datadata-team-datadata-api/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/datadata-team-datadata-api?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/datadata-team-datadata-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/datadata-team-datadata-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/datadata-team-datadata-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
datadata-team. (2026). datadata-api security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/datadata-team-datadata-api/audits/4BibTeX 引用
@techreport{datadata-team-datadata-team-datadata-api-2026,
author = {datadata-team},
title = {datadata-api security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/datadata-team-datadata-api/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "datadata-api security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "datadata-team"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/datadata-team-datadata-api/audits/4"
identifiers:
- type: other
value: "skillstore:datadata-team-datadata-api:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 68
架構
85
可維護性
85
內容
67
社群
83
規範符合度
你可以打造什麼
探索新資料集
在撰寫 SQL 前，檢視資料來源中繼資料、列出資料表，並描述所選 schema。
建置 API 工作流程
產生用於查詢、匯出與錯誤處理的 Datadata REST 或 CLI 流程。
將資料載入空間
建立 ducklake 資料表、插入已準備的列，並驗證已儲存的資料表 schema。
試試這些提示
列出可用資料表
使用 Datadata 列出資料來源 <id> 的資料表。顯示資料表名稱、schema，以及下一個安全步驟。
描述單一資料表
描述資料來源 <id> 中的資料表 <table>，並說明對簡單查詢重要的欄位。
執行唯讀查詢
針對 <question> 執行唯讀 Datadata SQL 查詢。確認資料來源綁定並回傳執行 ID。
管理 Data Space
為 <dataset> 建立 ducklake data-space 資料表、插入這些列，然後在插入後描述該資料表。
最佳實務
- 在執行查詢或寫入命令前，確認所選資料來源。
- 在撰寫 SQL 前，檢查資料來源類型、資料表與欄位。
- 將 API 金鑰保存在環境變數或本機設定中，絕不要放在提示中。
避免
- 未經使用者明確核准，不要執行 drop 或 insert 命令。
- 不要將完整的 NDJSON 或 CSV 匯出載入模型上下文。
- 不要將 API 金鑰傳送至未驗證的 base URL 或共享命令記錄。
常見問題
此技能需要 Datadata API 金鑰嗎？
私人資料來源存取、查詢執行、匯出與寫入作業都需要 Datadata API 金鑰。
它可以在未登入的情況下搜尋公開資料來源嗎？
可以。公開資料來源搜尋可以在沒有 API 金鑰的情況下執行。
它可以寫入資料嗎？
可以。當金鑰具有寫入權限時，它可以建立、插入及刪除 ducklake data-space 資料表。
查詢結果儲存在哪裡？
結果會寫入本機檔案；除非提供輸出路徑，通常位於系統暫存目錄下。
它可與 Claude、Codex 和 Claude Code 搭配使用嗎？
可以。報告宣告支援 Claude、Codex 和 Claude Code。
執行 SQL 前應該確認什麼？
請確認資料來源、資料表名稱、欄位名稱、查詢引擎，以及 SQL 是否為唯讀。