← Back to Skills Marketplace
cinience

Aliyun Hbr Backup

by cinience · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install aliyun-hbr-backup
Description
Use when managing Alibaba Cloud Cloud Backup (HBR) via OpenAPI/SDK, including the user asks for backup lifecycle operations such as resource listing, policy/...
README (SKILL.md)

Category: service

Cloud Backup

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Cloud Backup.

Workflow

  1. Confirm region, resource identifiers, and desired action.
  2. Discover API list and required parameters (see references).
  3. Call API with SDK or OpenAPI Explorer.
  4. Verify results with describe/list APIs.

AccessKey priority (must follow)

  1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
  2. Shared config file: ~/.alibabacloud/credentials

API discovery

  • Product code: hbr
  • Default API version: 2017-09-08
  • Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

  1. Inventory/list: prefer List* / Describe* APIs to get current resources.
  2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
  3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code \x3CProductCode> --version \x3CVersion>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-hbr-backup/

Validation

mkdir -p output/aliyun-hbr-backup
for f in skills/backup/aliyun-hbr-backup/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-hbr-backup/validate.txt

Pass criteria: command exits 0 and output/aliyun-hbr-backup/validate.txt is generated.

Output And Evidence

  • Save artifacts, command outputs, and API response summaries under output/aliyun-hbr-backup/.
  • Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

  • Configure least-privilege Alibaba Cloud credentials before execution.
  • Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
  • If region is unclear, ask the user before running mutating operations.

References

  • Sources: references/sources.md
Usage Guidance
This skill appears to implement what it claims (HBR/OpenAPI helper) but the manifest fails to declare the Alibaba Cloud credentials the instructions require. Before installing or running it: - Treat it as needing Alibaba Cloud credentials. Only provide least-privilege credentials (temporary/limited IAM keys) scoped to HBR operations. - Confirm how your agent runtime will supply credentials (env vars, shared config) because the package metadata does not declare them — that affects prompts and automation behavior. - Inspect any agent prompts or logs that might write sensitive identifiers or credentials to output/aliyun-hbr-backup/ and ensure that directory is secure or isolated. - If you plan to allow automatic (agent-invoked) mutating operations, require an explicit user confirmation step for any Create/Update/Delete actions. - If you need stronger assurance, run the included script in a sandbox first (it only fetches public API metadata) and review any additional code the agent would run to perform SDK/API calls. I have medium confidence in this assessment because the package is small and readable, but the metadata/instructions mismatch leaves ambiguity about how credentials will be handled at runtime; clarifying that would raise confidence to high.
Capability Analysis
Type: OpenClaw Skill Name: aliyun-hbr-backup Version: 1.0.0 The skill bundle is a legitimate tool for managing Alibaba Cloud Backup (HBR) resources. The provided script (scripts/list_openapi_meta_apis.py) fetches API metadata from official Alibaba Cloud endpoints (api.aliyun.com) and saves it locally for the agent's use, with no evidence of data exfiltration, malicious execution, or prompt injection.
Capability Assessment
Purpose & Capability
The name and description match the included instructions and script: this is an Alibaba Cloud HBR/OpenAPI helper. Requesting Alibaba Cloud credentials is reasonable for this purpose. However, the published metadata lists no required env vars or primary credential even though the SKILL.md explicitly instructs using ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET and a shared credentials file; that mismatch is an inconsistency.
Instruction Scope
SKILL.md instructs the agent to discover APIs, call SDK/OpenAPI Explorer, and save artifacts (including key parameters like region/resource id/time range) under output/aliyun-hbr-backup/. It also sets an access-key priority (env vars and ~/.alibabacloud/credentials). The included script only fetches public OpenAPI metadata (no credential use), but the prose grants the agent broad discretion to call SDKs and perform mutating operations — and to write potentially sensitive evidence to disk. The instructions do not limit which APIs may be called or require explicit user confirmation before mutations, except a generic 'ask the user' for unclear regions.
Install Mechanism
This is instruction-only with a small included Python script. There is no installer that downloads or executes remote archives and no extra dependencies declared. Low install risk.
Credentials
The SKILL.md explicitly expects Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID) and references ~/.alibabacloud/credentials, which are proportional to the stated purpose. But the skill metadata lists no required env vars or primary credential — an omission that makes it unclear how the skill will request or handle credentials at install/runtime. The instruction to include key parameters in output files could expose identifiers alongside API responses; users should ensure least-privilege and consider use of temporary, scoped credentials.
Persistence & Privilege
The skill is not force-included (always:false) and does not request elevated platform-wide privileges. It writes artifacts to an output directory under the skill workspace (normal). It does not modify other skills or global agent configuration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install aliyun-hbr-backup
  3. After installation, invoke the skill by name or use /aliyun-hbr-backup
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of aliyun-hbr-backup skill. - Enables management of Alibaba Cloud Cloud Backup (HBR) resources using OpenAPI/SDK. - Supports backup lifecycle operations: resource listing, policy/config updates, job status queries, and troubleshooting workflows. - Prioritizes credential acquisition via environment variables, with fallback to shared config file. - Provides workflow guidance, including API discovery and artifact output policies. - Includes validation and reproducibility requirements for command outputs and evidence. - References available API and quickstart scripting included.
Metadata
Slug aliyun-hbr-backup
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Aliyun Hbr Backup?

Use when managing Alibaba Cloud Cloud Backup (HBR) via OpenAPI/SDK, including the user asks for backup lifecycle operations such as resource listing, policy/... It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.

How do I install Aliyun Hbr Backup?

Run "/install aliyun-hbr-backup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Aliyun Hbr Backup free?

Yes, Aliyun Hbr Backup is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Aliyun Hbr Backup support?

Aliyun Hbr Backup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Aliyun Hbr Backup?

It is built and maintained by cinience (@cinience); the current version is v1.0.0.

💬 Comments