← Back to Skills Marketplace
88
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install aliyun-fc-agentrun
Description
Use when managing Function Compute AgentRun resources via OpenAPI (runtime, sandbox, model, memory, credentials), including creating runtimes/endpoints, quer...
README (SKILL.md)
Category: service
Function Compute AgentRun (OpenAPI)
Use AgentRun OpenAPI (ROA) to manage runtimes, sandboxes, model services, memory, and credentials.
Prerequisites
- AccessKey via RAM user (least privilege).
- Select the correct regional endpoint (see
references/endpoints.md). If unsure, choose the most reasonable region for the task or ask the user. - Use OpenAPI Explorer or official SDK to avoid manual signing (ROA requires SignatureV1).
Workflow
- Choose region endpoint (
agentrun.cn-\x3Cregion>.aliyuncs.com). - Create runtime → publish version → create runtime endpoint.
- Create sandbox/template if needed.
- Configure credentials and model services as required.
- Query resources for troubleshooting.
API Groups
See references/api_overview.md for the full API list and grouping.
Script quickstart
python skills/compute/fc/aliyun-fc-agentrun/scripts/quickstart.py
Environment variables:
AGENTRUN_ENDPOINTALICLOUD_ACCESS_KEY_IDALICLOUD_ACCESS_KEY_SECRETOUTPUT_DIR(optional)
Runtime flow script
AGENTRUN_RUNTIME_NAME="my-runtime" \\
AGENTRUN_RUNTIME_ENDPOINT_NAME="my-runtime-endpoint" \\
python skills/compute/fc/aliyun-fc-agentrun/scripts/runtime_flow.py
Environment variables:
AGENTRUN_ENDPOINTALICLOUD_ACCESS_KEY_IDALICLOUD_ACCESS_KEY_SECRETAGENTRUN_RUNTIME_NAMEAGENTRUN_RUNTIME_ENDPOINT_NAMEAGENTRUN_RUNTIME_DESC(optional)OUTPUT_DIR(optional)
Cleanup script
AGENTRUN_RUNTIME_ID="runtime-id" \\
AGENTRUN_RUNTIME_ENDPOINT_ID="endpoint-id" \\
python skills/compute/fc/aliyun-fc-agentrun/scripts/cleanup_runtime.py
Environment variables:
AGENTRUN_ENDPOINTALICLOUD_ACCESS_KEY_IDALICLOUD_ACCESS_KEY_SECRETAGENTRUN_RUNTIME_IDAGENTRUN_RUNTIME_ENDPOINT_IDOUTPUT_DIR(optional)
SDK Notes
See references/sdk.md for SDK acquisition guidance.
Output Policy
If you store any generated files or responses, write them under:
output/compute-fc-agentrun/.
Validation
mkdir -p output/aliyun-fc-agentrun
for f in skills/compute/fc/aliyun-fc-agentrun/scripts/*.py; do
python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-fc-agentrun/validate.txt
Pass criteria: command exits 0 and output/aliyun-fc-agentrun/validate.txt is generated.
Output And Evidence
- Save artifacts, command outputs, and API response summaries under
output/aliyun-fc-agentrun/. - Include key parameters (region/resource id/time range) in evidence files for reproducibility.
References
-
API overview and operation list:
references/api_overview.md -
Regional endpoints:
references/endpoints.md -
SDK guidance:
references/sdk.md -
Source list:
references/sources.md
Usage Guidance
This skill appears to do what it says (manage Alibaba Cloud AgentRun runtimes/endpoints) and the included Python scripts are straightforward. Before installing or running it, do the following: 1) Do not provide long-lived full-admin credentials — create a RAM user with least privilege (only the AgentRun APIs needed: create/update/delete/list runtimes/endpoints, credential operations, etc.), or prefer temporary STS tokens. 2) Verify and install the AgentRun SDK from official Alibaba Cloud sources (OpenAPI Explorer / official package repository) — do not install untrusted third-party packages. 3) Note the manifest inconsistency: the registry does not declare the required env vars; treat this as a red flag and require the publisher to update the manifest to list ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET (and optional security token) as required. 4) Run initial tests in an isolated or test account (or with tightly scoped credentials) and review the output files under output/compute-fc-agentrun/. 5) If you need higher assurance, request source provenance (where the SDK should be obtained) or a corrected manifest from the publisher; otherwise consider the skill suspicious and limit any credentials used to a throwaway/test account.
Capability Analysis
Type: OpenClaw Skill
Name: aliyun-fc-agentrun
Version: 1.0.0
The skill bundle provides standard scripts and documentation for managing Alibaba Cloud Function Compute AgentRun resources. The Python scripts (quickstart.py, runtime_flow.py, cleanup_runtime.py) utilize the official Alibaba Cloud SDK to perform legitimate resource management tasks such as listing, creating, and deleting runtimes and endpoints. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code logic is consistent with the stated purpose of the skill.
Capability Assessment
Purpose & Capability
Name/description align with the included scripts and references: the scripts call the AgentRun OpenAPI to create/list/delete runtimes/endpoints and manage related resources. Requiring Alibaba Cloud access keys and selecting a regional endpoint is expected for this purpose. However, the registry entry declares no required environment variables or primary credential while the SKILL.md and all scripts clearly require ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (and optionally a security token) — this metadata mismatch is inconsistent.
Instruction Scope
SKILL.md restricts actions to AgentRun operations (create/publish endpoint/list/delete) and the three Python scripts only interact with the AgentRun SDK and write responses into an output/compute-fc-agentrun/ directory. There are no instructions to read arbitrary unrelated files, contact unexpected endpoints, or exfiltrate data beyond the AgentRun service. The scripts do exit if the SDK is missing, and they store API responses locally.
Install Mechanism
This is instruction-only (no install spec). The scripts import alibabacloud_agentrun20250910 and alibabacloud_tea_openapi SDK packages; SKILL.md points users to use the OpenAPI Explorer or SDK but does not provide automated install steps. That is not inherently malicious but raises usability/risk concerns: users must fetch/install the SDK from official sources (or generate it) before running the scripts. Lack of an explicit, verifiable SDK source means a user could accidentally install a malicious package if they follow ambiguous instructions.
Credentials
The scripts require cloud credentials (ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET) and optionally a security token; those are necessary for AgentRun operations and are proportionate to the stated functionality. However, the registry metadata does not declare these required environment variables or a primary credential. That discrepancy is a material concern: the skill will ask for sensitive credentials at runtime but does not advertise that requirement in its manifest, making it easier to overlook when granting keys. Recommend the skill manifest be updated to declare required env vars and the primary credential.
Persistence & Privilege
The skill does not request always:true, does not claim to run installs or modify other skills, and only writes outputs under its own output/compute-fc-agentrun/ folder. It does not request persistent system-wide privileges in the manifest. Autonomous invocation is allowed (platform default) but is not combined with other high-risk flags here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install aliyun-fc-agentrun - After installation, invoke the skill by name or use
/aliyun-fc-agentrun - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of aliyun-fc-agentrun skill:
- Provides management for Alibaba Cloud Function Compute AgentRun resources using OpenAPI (ROA).
- Supports workflows to create and manage runtimes, endpoints, sandboxes, model services, and credentials.
- Includes quickstart, runtime flow, and cleanup scripts with environment variable configuration.
- Guides users on region and endpoint selection, OpenAPI/SDK usage, and output directory structure.
- Adds validation and reproducibility guidelines for evidence and artifact storage.
Metadata
Frequently Asked Questions
What is Aliyun Fc Agentrun?
Use when managing Function Compute AgentRun resources via OpenAPI (runtime, sandbox, model, memory, credentials), including creating runtimes/endpoints, quer... It is an AI Agent Skill for Claude Code / OpenClaw, with 88 downloads so far.
How do I install Aliyun Fc Agentrun?
Run "/install aliyun-fc-agentrun" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Aliyun Fc Agentrun free?
Yes, Aliyun Fc Agentrun is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Aliyun Fc Agentrun support?
Aliyun Fc Agentrun is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Aliyun Fc Agentrun?
It is built and maintained by cinience (@cinience); the current version is v1.0.0.
More Skills