← Back to Skills Marketplace
cinience

Aliyun Openapi Discovery

by cinience · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
83
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install aliyun-openapi-discovery
Description
Use when discovering and reconciling Alibaba Cloud product catalogs from Ticket System, Support & Service, and BSS OpenAPI; fetch OpenAPI product/version/API...
README (SKILL.md)

Alibaba Cloud Product + API Discovery

Follow this workflow to collect products, resolve API metadata, and build summaries for skill planning.

Workflow

  1. Fetch product lists from the three sources
  • Ticket System (ListProducts)
  • Support & Service (ListProductByGroup)
  • BSS OpenAPI (QueryProductList)

Run the bundled scripts (from this skill folder):

python scripts/products_from_ticket_system.py
python scripts/products_from_support_service.py
python scripts/products_from_bssopenapi.py

Provide required env vars in each script (see references).

  1. Merge product lists
python scripts/merge_product_sources.py

This writes output/product-scan/merged_products.json and .md.

  1. Fetch OpenAPI metadata product list
python scripts/products_from_openapi_meta.py

This writes output/product-scan/openapi-meta/products.json and products_normalized.json.

  1. Fetch OpenAPI API docs per product/version
python scripts/apis_from_openapi_meta.py

By default this can be large. Use filters for dry runs:

  • OPENAPI_META_MAX_PRODUCTS=10
  • OPENAPI_META_PRODUCTS=Ecs,Ons
  • OPENAPI_META_VERSIONS=2014-05-26
  1. Join products with API counts
python scripts/join_products_with_api_meta.py
  1. Summarize products by category/group
python scripts/summarize_openapi_meta_products.py
  1. (Optional) Compare products vs existing skills
python scripts/analyze_products_vs_skills.py

Output discipline

All generated files must go under output/. Do not place temporary files elsewhere.

Validation

mkdir -p output/aliyun-openapi-discovery
for f in skills/platform/openapi/aliyun-openapi-discovery/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-openapi-discovery/validate.txt

Pass criteria: command exits 0 and output/aliyun-openapi-discovery/validate.txt is generated.

Output And Evidence

  • Save artifacts, command outputs, and API response summaries under output/aliyun-openapi-discovery/.
  • Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

  • Configure least-privilege Alibaba Cloud credentials before execution.
  • Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
  • If region is unclear, ask the user before running mutating operations.

References

  • Product source APIs: see references/product-sources.md
  • OpenAPI meta endpoints: see references/openapi-meta.md
Usage Guidance
This skill appears to do what it claims (gather Alibaba Cloud product and OpenAPI metadata) but take precautions before running it: - Expect to provide ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (and optional security token/region) even though the registry metadata does not list them; treat these as sensitive secrets. - Use least-privilege credentials (read/list-only) and consider using a short-lived STS token. Do not run with account-owner keys. - Install required Python dependencies (aliyun-python-sdk-core) in an isolated environment (virtualenv or container) before running. - Review/support endpoints (SUPPORT_ENDPOINT, TICKET_ENDPOINT) you supply to ensure they point to the intended services and not to unexpected hosts. - Run with dry-run filters (OPENAPI_META_MAX_PRODUCTS, OPENAPI_META_PRODUCTS) to limit scope initially and inspect outputs under output/. - Consider running the scripts in a sandbox or ephemeral CI job and rotate or revoke keys afterwards. If you need this skill to be safer for broader consumption, ask the author to: declare required env vars in registry metadata, provide an install/dependency spec (pip requirements), and document least-privilege IAM scopes required.
Capability Analysis
Type: OpenClaw Skill Name: aliyun-openapi-discovery Version: 1.0.0 The skill bundle is a legitimate tool for discovering and cataloging Alibaba Cloud products and APIs. It uses the official Alibaba Cloud Python SDK and public metadata endpoints (api.aliyun.com) to fetch product lists, API documentation, and service categories. While the scripts require cloud credentials (ALICLOUD_ACCESS_KEY_ID/SECRET) and perform network requests, their behavior is transparent, well-documented, and strictly aligned with the stated purpose of product reconciliation and skill gap analysis. No indicators of malicious intent, such as data exfiltration to unauthorized domains or hidden execution, were found.
Capability Assessment
⚠ Purpose & Capability
The scripts and SKILL.md perform Alibaba Cloud product/API discovery and legitimately require Alibaba Cloud credentials and service endpoints. However, the registry metadata lists no required environment variables or credentials while the SKILL.md and multiple scripts clearly expect ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET (and optional security token/region) and service endpoint vars. That registry vs runtime mismatch is misleading and problematic.
✓ Instruction Scope
Runtime instructions are explicit: run the included Python scripts to call Alibaba metadata and product APIs, write outputs under output/, and provide the required env vars. The instructions do not attempt to read unrelated local files or send data to unknown third-party endpoints — network calls target Alibaba APIs and write local artifacts.
⚠ Install Mechanism
There is no install spec even though multiple Python scripts import the aliyun SDK (aliyun-python-sdk-core). The package requirement is hinted only by runtime error messages. Lack of a declared install step or dependency list increases friction and risk (users may run without required packages or with unvetted versions). There are no downloads from untrusted URLs, so code-origin risk is moderate rather than high.
⚠ Credentials
The credentials requested by the scripts (ALICLOUD_ACCESS_KEY_ID/SECRET, optional STS token, and service endpoint vars) are proportionate to the described task, but they are sensitive. The registry failing to declare those required env vars is a significant inconsistency. Also some scripts accept arbitrary SUPPORT_ENDPOINT/TICKET_ENDPOINT values (expected for per-product endpoints) — those could point to internal/non-public hosts, so users should review before supplying endpoints/credentials.
✓ Persistence & Privilege
The skill is not marked always:true and does not request persistent elevated platform privileges. It writes artifacts only under output/ by convention and does not attempt to modify other skills or global agent configuration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install aliyun-openapi-discovery
  3. After installation, invoke the skill by name or use /aliyun-openapi-discovery
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of aliyun-openapi-discovery. - Supports unified discovery of Alibaba Cloud products from Ticket System, Support & Service, and BSS OpenAPI sources. - Automates fetching and merging of product lists, and retrieving OpenAPI product/version/API metadata. - Provides scripts for mapping products to APIs, summarizing coverage, and generating gap/coverage reports. - All generated output and evidence files are saved under the dedicated output directory. - Includes validation steps and outlines required environment variables for secure, reproducible runs.
Metadata
Slug aliyun-openapi-discovery
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Aliyun Openapi Discovery?

Use when discovering and reconciling Alibaba Cloud product catalogs from Ticket System, Support & Service, and BSS OpenAPI; fetch OpenAPI product/version/API... It is an AI Agent Skill for Claude Code / OpenClaw, with 83 downloads so far.

How do I install Aliyun Openapi Discovery?

Run "/install aliyun-openapi-discovery" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Aliyun Openapi Discovery free?

Yes, Aliyun Openapi Discovery is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Aliyun Openapi Discovery support?

Aliyun Openapi Discovery is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Aliyun Openapi Discovery?

It is built and maintained by cinience (@cinience); the current version is v1.0.0.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments