← Back to Skills Marketplace
cinience

Alicloud Platform Openapi Product Api Discovery

by cinience · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
1119
Downloads
0
Stars
2
Active Installs
3
Versions
Install in OpenClaw
/install alicloud-platform-openapi-product-api-discovery
Description
Discover and reconcile Alibaba Cloud product catalogs from Ticket System, Support & Service, and BSS OpenAPI; fetch OpenAPI product/version/API metadata; and...
README (SKILL.md)

Alibaba Cloud Product + API Discovery

Follow this workflow to collect products, resolve API metadata, and build summaries for skill planning.

Workflow

  1. Fetch product lists from the three sources
  • Ticket System (ListProducts)
  • Support & Service (ListProductByGroup)
  • BSS OpenAPI (QueryProductList)

Run the bundled scripts (from this skill folder):

python scripts/products_from_ticket_system.py
python scripts/products_from_support_service.py
python scripts/products_from_bssopenapi.py

Provide required env vars in each script (see references).

  1. Merge product lists
python scripts/merge_product_sources.py

This writes output/product-scan/merged_products.json and .md.

  1. Fetch OpenAPI metadata product list
python scripts/products_from_openapi_meta.py

This writes output/product-scan/openapi-meta/products.json and products_normalized.json.

  1. Fetch OpenAPI API docs per product/version
python scripts/apis_from_openapi_meta.py

By default this can be large. Use filters for dry runs:

  • OPENAPI_META_MAX_PRODUCTS=10
  • OPENAPI_META_PRODUCTS=Ecs,Ons
  • OPENAPI_META_VERSIONS=2014-05-26
  1. Join products with API counts
python scripts/join_products_with_api_meta.py
  1. Summarize products by category/group
python scripts/summarize_openapi_meta_products.py
  1. (Optional) Compare products vs existing skills
python scripts/analyze_products_vs_skills.py

Output discipline

All generated files must go under output/. Do not place temporary files elsewhere.

Validation

mkdir -p output/alicloud-platform-openapi-product-api-discovery
for f in skills/platform/openapi/alicloud-platform-openapi-product-api-discovery/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-platform-openapi-product-api-discovery/validate.txt

Pass criteria: command exits 0 and output/alicloud-platform-openapi-product-api-discovery/validate.txt is generated.

Output And Evidence

  • Save artifacts, command outputs, and API response summaries under output/alicloud-platform-openapi-product-api-discovery/.
  • Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

  • Configure least-privilege Alibaba Cloud credentials before execution.
  • Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
  • If region is unclear, ask the user before running mutating operations.

References

  • Product source APIs: see references/product-sources.md
  • OpenAPI meta endpoints: see references/openapi-meta.md
Usage Guidance
This skill appears to do what it says (discover Alibaba Cloud products/APIs) and legitimately requires Alibaba Cloud API credentials and some service endpoints. Before installing or running it: - Expect to provide ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (prefer short-lived STS tokens and least-privilege roles). The registry metadata incorrectly lists no required env vars—do not trust that field. - Inspect the bundled scripts yourself (they are included) and run them in an isolated environment or container. They only call documented aliyun endpoints (api.aliyun.com and service domains) and write under output/. - Note the optional analyze_products_vs_skills.py will read files under a local 'skills' directory to compare coverage; if that is sensitive, avoid running that step or run it in a copied/filtered workspace. - The scripts check for and may require installing aliyun-python-sdk-core via pip; only install packages from trusted sources. - Use least-privilege credentials and monitor network/file outputs. If you want higher assurance, ask the publisher for a manifest listing required env vars and a brief explanation of which calls are read-only vs mutating (the SKILL.md already says to ask before running mutating operations).
Capability Analysis
Type: OpenClaw Skill Name: alicloud-platform-openapi-product-api-discovery Version: 1.0.2 This skill bundle is a legitimate tool for discovering Alibaba Cloud product catalogs and API metadata to assist in skill development. The scripts (e.g., products_from_bssopenapi.py, apis_from_openapi_meta.py) interact with official Alibaba Cloud endpoints and the aliyun-python-sdk-core to fetch service information. While the tool requires sensitive cloud credentials, the code logic is transparent, lacks obfuscation, and shows no signs of data exfiltration or malicious intent. The workflow is consistent with the stated purpose of mapping cloud services and identifying gaps in existing skill coverage.
Capability Assessment
Purpose & Capability
The scripts implement exactly what the skill description says: pulling product lists from Ticket System, Support & Service, BSS OpenAPI, and the OpenAPI metadata endpoints. The required Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional tokens, and service-specific endpoint/group env vars) are reasonable for this purpose. However, the registry metadata claims "Required env vars: none" and "Primary credential: none", which is inconsistent with the SKILL.md and the scripts that require cloud credentials and service endpoints.
Instruction Scope
The SKILL.md gives an explicit, narrow workflow (run the bundled Python scripts, save outputs under output/). All scripts operate on network endpoints (aliyun API/meta endpoints) and write to the output/ tree. One optional script (analyze_products_vs_skills.py) reads local files under the 'skills' directory to compare products to existing skills — that accesses other local SKILL.md files, which is within the stated 'compare vs existing skills' feature but may be surprising if you don't expect the skill to scan your repository.
Install Mechanism
This is instruction-only with bundled scripts (no install spec). It will run with the system Python and optionally requires the official aliyun Python SDK (aliyun-python-sdk-core) which the scripts check for and ask you to pip install if missing. No remote arbitrary installers or unknown download URLs are used; network calls are to documented aliyun endpoints.
Credentials
The scripts require sensitive credentials (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET and optional STS tokens) and service-specific env vars (TICKET_ENDPOINT, SUPPORT_ENDPOINT, SUPPORT_GROUP_ID, etc.), which are proportionate to calling the relevant Alibaba Cloud APIs. The concern is that the registry metadata does not declare these required env vars; that omission could lead users to install/run the skill without realizing they must provide credentials. Also the scripts will read the local 'skills' tree (analyze step), which may expose local content to the tool’s output files.
Persistence & Privilege
The skill is not marked always:true and does not request permanent presence or attempt to modify other skills or global agent settings. It only writes outputs under output/ as documented. Autonomous invocation is allowed (platform default) but not a new concern here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install alicloud-platform-openapi-product-api-discovery
  3. After installation, invoke the skill by name or use /alicloud-platform-openapi-product-api-discovery
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
batch publish from alicloud-skills on 2026-03-11
v1.0.1
Initial ClawHub publish for Alibaba Cloud skills with agents metadata.
v1.0.0
Initial ClawHub publish for Alibaba Cloud skills with agents metadata.
Metadata
Slug alicloud-platform-openapi-product-api-discovery
Version 1.0.2
License MIT-0
All-time Installs 2
Active Installs 2
Total Versions 3
Frequently Asked Questions

What is Alicloud Platform Openapi Product Api Discovery?

Discover and reconcile Alibaba Cloud product catalogs from Ticket System, Support & Service, and BSS OpenAPI; fetch OpenAPI product/version/API metadata; and... It is an AI Agent Skill for Claude Code / OpenClaw, with 1119 downloads so far.

How do I install Alicloud Platform Openapi Product Api Discovery?

Run "/install alicloud-platform-openapi-product-api-discovery" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Alicloud Platform Openapi Product Api Discovery free?

Yes, Alicloud Platform Openapi Product Api Discovery is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Alicloud Platform Openapi Product Api Discovery support?

Alicloud Platform Openapi Product Api Discovery is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Alicloud Platform Openapi Product Api Discovery?

It is built and maintained by cinience (@cinience); the current version is v1.0.2.

💬 Comments