← Back to Skills Marketplace
106
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install aliyun-dns-cli
Description
Use when you need to query, add, and update DNS records via aliyun-cli, including CNAME setup for Function Compute custom domains.
README (SKILL.md)
Category: tool
Alibaba Cloud DNS (Alidns) CLI
Goals
- Query and manage Alibaba Cloud DNS records via
aliyun-cli. - Quickly configure CNAME for Function Compute custom domains.
When to Use
- When you need to add/update DNS records in Alibaba Cloud DNS.
- When you need CNAME setup for FC custom domains.
Install aliyun-cli (without sudo)
curl -fsSL https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz -o /tmp/aliyun-cli.tgz
mkdir -p ~/.local/bin
tar -xzf /tmp/aliyun-cli.tgz -C /tmp
mv /tmp/aliyun ~/.local/bin/aliyun
chmod +x ~/.local/bin/aliyun
Configure Credentials
~/.local/bin/aliyun configure set \
--profile default \
--access-key-id \x3CAK> \
--access-key-secret \x3CSK> \
--region cn-hangzhou
Configure region as default; if best region is unclear, ask the user.
Query DNS Records
Query subdomain records:
~/.local/bin/aliyun alidns DescribeSubDomainRecords \
--SubDomain news.example.com
Add CNAME Record
~/.local/bin/aliyun alidns AddDomainRecord \
--DomainName example.com \
--RR news \
--Type CNAME \
--Value \x3CTARGET>
FC Custom Domain CNAME Target
Custom domain should point to FC public CNAME:
\x3Caccount_id>.\x3Cregion_id>.fc.aliyuncs.com
Example (Hangzhou):
1629965279769872.cn-hangzhou.fc.aliyuncs.com
Common Issues
- If apex CNAME is not supported, use subdomain like
wwwor ALIAS/ANAME records. - Create FC custom domain only after DNS propagation, otherwise
DomainNameNotResolvedmay occur.
References
-
aliyun-cli installation
-
Alidns API（AddDomainRecord / DescribeSubDomainRecords）
-
FC custom domain configuration and CNAME guidance
-
Official source list:
references/sources.md
Validation
mkdir -p output/aliyun-dns-cli
echo "validation_placeholder" > output/aliyun-dns-cli/validate.txt
Pass criteria: command exits 0 and output/aliyun-dns-cli/validate.txt is generated.
Output And Evidence
- Save artifacts, command outputs, and API response summaries under
output/aliyun-dns-cli/. - Include key parameters (region/resource id/time range) in evidence files for reproducibility.
Prerequisites
- Configure least-privilege Alibaba Cloud credentials before execution.
- Prefer environment variables:
ALICLOUD_ACCESS_KEY_ID,ALICLOUD_ACCESS_KEY_SECRET, optionalALICLOUD_REGION_ID. - If region is unclear, ask the user before running mutating operations.
Workflow
- Confirm user intent, region, identifiers, and whether the operation is read-only or mutating.
- Run one minimal read-only query first to verify connectivity and permissions.
- Execute the target operation with explicit parameters and bounded scope.
- Verify results and save output/evidence files.
Usage Guidance
This skill's actions (install aliyun-cli, set AK/SK, run Alidns commands) are coherent for DNS management, but the registry metadata failing to declare required credentials is a red flag. Before installing or running: 1) Verify the download URL (aliyuncli.alicdn.com) and prefer official install docs or package manager alternatives. 2) Use least-privilege Alibaba Cloud keys, create a dedicated short-lived key for this task if possible. 3) Prefer providing credentials via environment variables (ALICLOUD_ACCESS_KEY_ID/SECRET) rather than embedding them in persistent config, and inspect any created files under ~/.local/bin and the CLI config. 4) Ask the publisher to update the skill metadata to declare required env vars/credentials. If you do not trust the source, do not run the curl+install steps.
Capability Analysis
Type: OpenClaw Skill
Name: aliyun-dns-cli
Version: 1.0.0
The skill bundle provides a legitimate workflow for managing Alibaba Cloud DNS records using the official aliyun-cli. It includes standard installation steps from official Alibaba Cloud domains (alicdn.com) and follows security best practices such as recommending environment variables for credentials and performing read-only checks before mutations. No malicious behavior or suspicious obfuscation was detected in SKILL.md or the associated configuration files.
Capability Assessment
Purpose & Capability
The skill's name/description align with managing Alidns records via aliyun-cli. However, the published metadata declares no required environment variables or primary credential, while the SKILL.md clearly requires Alibaba Cloud Access Key ID/Secret (and suggests ALICLOUD_* env vars). The metadata omission is an incoherence: a DNS-management skill legitimately needs credentials and should declare them.
Instruction Scope
Runtime instructions are focused on installing aliyun-cli, configuring credentials, and calling the expected Alidns CLI commands. They do not appear to request unrelated files or external endpoints. However, they instruct storing credentials (via 'aliyun configure set' or env vars) and writing artifacts under the user's home (~/ .local/bin and output/aliyun-dns-cli), and these actions are not reflected in the declared requirements — that scope mismatch is a concern.
Install Mechanism
The install uses curl to fetch an archive from aliyuncli.alicdn.com (Alibaba's CDN) and extracts/moves it into ~/.local/bin. Using the official CDN is expected for aliyun-cli; extraction and installation into the user's home is normal for a user-level installation. Still, any install-from-URL step writes executable code to disk and should be reviewed before running.
Credentials
The skill requires access keys (AK/SK) to operate, which is proportionate to DNS management. The problem is the metadata does not declare these env vars or a primary credential, so consumers may not realize sensitive credentials are needed or will be persisted by the CLI. The SKILL.md does correctly recommend least-privilege credentials and suggests using environment variables, but the omission from registry metadata is misleading.
Persistence & Privilege
The skill is instruction-only and not always-enabled. It instructs the agent/user to install a binary into ~/.local/bin and to run the aliyun CLI configure command, which will create local credential/config files. This is expected for a CLI-based integration but does result in persistent binaries and stored credentials in the user's home directory.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install aliyun-dns-cli - After installation, invoke the skill by name or use
/aliyun-dns-cli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of aliyun-dns-cli.
- Provides CLI-based tools to query, add, and update Alibaba Cloud DNS (Alidns) records using aliyun-cli.
- Includes simplified setup guides for Function Compute (FC) custom domain CNAME records.
- Offers installation, credential configuration, and command usage documentation.
- Details common troubleshooting steps and validation instructions.
- Emphasizes secure credential management and reproducible operation workflows.
Metadata
Frequently Asked Questions
What is Aliyun Dns Cli?
Use when you need to query, add, and update DNS records via aliyun-cli, including CNAME setup for Function Compute custom domains. It is an AI Agent Skill for Claude Code / OpenClaw, with 106 downloads so far.
How do I install Aliyun Dns Cli?
Run "/install aliyun-dns-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Aliyun Dns Cli free?
Yes, Aliyun Dns Cli is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Aliyun Dns Cli support?
Aliyun Dns Cli is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Aliyun Dns Cli?
It is built and maintained by cinience (@cinience); the current version is v1.0.0.
More Skills