← 返回 Skills 市场
cinience

Alicloud Security Id Verification Cloudauth

作者 cinience · GitHub ↗ · v1.0.4 · MIT-0
cross-platform ⚠ suspicious
1178
总下载
0
收藏
2
当前安装
5
版本数
在 OpenClaw 中安装
/install alicloud-security-id-verification-cloudauth
功能描述
Manage Alibaba Cloud ID Verification (Cloudauth) via OpenAPI/SDK. Use whenever the user is working on identity-verification resource operations, config updat...
使用说明 (SKILL.md)

Category: service

ID Verification (Cloudauth)

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for ID Verification.

Workflow

  1. Confirm region, resource identifiers, and desired action.
  2. Discover API list and required parameters (see references).
  3. Call API with SDK or OpenAPI Explorer.
  4. Verify results with describe/list APIs.

AccessKey priority (must follow)

  1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
  2. Shared config file: ~/.alibabacloud/credentials

API discovery

  • Product code: Cloudauth
  • Default API version: 2022-11-25
  • Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

  1. Inventory/list: prefer List* / Describe* APIs to get current resources.
  2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
  3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code \x3CProductCode> --version \x3CVersion>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/alicloud-security-id-verification-cloudauth/

Validation

mkdir -p output/alicloud-security-id-verification-cloudauth
for f in skills/security/identity/alicloud-security-id-verification-cloudauth/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-security-id-verification-cloudauth/validate.txt

Pass criteria: command exits 0 and output/alicloud-security-id-verification-cloudauth/validate.txt is generated.

Output And Evidence

  • Save artifacts, command outputs, and API response summaries under output/alicloud-security-id-verification-cloudauth/.
  • Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

  • Configure least-privilege Alibaba Cloud credentials before execution.
  • Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
  • If region is unclear, ask the user before running mutating operations.

References

  • Sources: references/sources.md
安全使用建议
This skill appears to do what it says (discover Cloudauth OpenAPI metadata and help with API workflows), but the registry metadata does not declare the Alibaba Cloud credentials that the SKILL.md requires — that's the main inconsistency. Before installing: (1) confirm the skill source/owner is trusted (owner ID is not a known homepage), (2) be prepared to provide least-privilege Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET) or use an appropriate IAM role, (3) avoid placing secrets in the output directory or evidence files (do not save access keys), and (4) consider running the script in an isolated environment or on a machine/account with limited permissions. If you need higher confidence, ask the publisher to update the registry metadata to declare the required env vars and provide a homepage or source repository for auditing.
功能分析
Type: OpenClaw Skill Name: alicloud-security-id-verification-cloudauth Version: 1.0.4 The skill bundle is a legitimate tool for managing Alibaba Cloud ID Verification (Cloudauth) services. It includes a Python script (scripts/list_openapi_meta_apis.py) that fetches API metadata from official Alibaba Cloud endpoints (api.aliyun.com) to help the agent discover available operations. The instructions in SKILL.md follow standard cloud management practices, such as using environment variables for credentials, and do not contain any evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
Name, description, SKILL.md, references, and the included script all consistently target Alibaba Cloud Cloudauth OpenAPI metadata and API workflows. The code fetches product API metadata from api.aliyun.com and writes an API list; this is coherent with the stated purpose. However, the registry metadata claims 'Required env vars: none' while the SKILL.md explicitly documents required Alibaba Cloud credentials and shared config — this mismatch is unexpected.
Instruction Scope
Runtime instructions are narrowly scoped to discovering OpenAPI metadata, calling Cloudauth SDK/APIs, and saving artifacts under the skill output directory. The SKILL.md instructs the agent to use environment variables or ~/.alibabacloud/credentials for credentials, to prefer least-privilege credentials, and to save evidence including key parameters (region/resource id/time range). The guidance to save key parameters is reasonable for reproducibility but could cause sensitive identifiers to be written to disk if the agent is not careful; SKILL.md does not explicitly warn against writing secrets to the output directory.
Install Mechanism
There is no install spec — the skill is instruction-only with a small included Python script. The script uses standard library urllib to call api.aliyun.com and writes output under a local output directory. No third-party packages, downloads from unknown URLs, or extract/install steps are present.
Credentials
The SKILL.md requires Alibaba Cloud access keys (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET) and optionally ALICLOUD_REGION_ID or ~/.alibabacloud/credentials, but the skill metadata lists no required env vars and no primary credential. That omission is a meaningful incoherence: the skill will reasonably need cloud credentials to perform API calls, yet the registry metadata doesn't declare them. Also the instructions ask to save evidence files that may include region/resource identifiers — avoid saving secrets. Verify you provide only least-privilege credentials and that no credentials are written to the output.
Persistence & Privilege
The skill does not request always:true and is user-invocable with normal autonomous invocation allowed. It does not attempt to modify other skills or system-wide settings. It only writes artifacts under its own output path by instruction.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install alicloud-security-id-verification-cloudauth
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /alicloud-security-id-verification-cloudauth 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.4
batch publish from alicloud-skills on 2026-03-11
v1.0.3
sync from alicloud-skills repo
v1.0.2
batch publish from alicloud-skills on 2026-02-13
v1.0.1
Initial ClawHub publish for Alibaba Cloud skills with agents metadata.
v1.0.0
Initial ClawHub publish for Alibaba Cloud skills with agents metadata.
元数据
Slug alicloud-security-id-verification-cloudauth
版本 1.0.4
许可证 MIT-0
累计安装 2
当前安装数 2
历史版本数 5
常见问题

Alicloud Security Id Verification Cloudauth 是什么?

Manage Alibaba Cloud ID Verification (Cloudauth) via OpenAPI/SDK. Use whenever the user is working on identity-verification resource operations, config updat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1178 次。

如何安装 Alicloud Security Id Verification Cloudauth?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install alicloud-security-id-verification-cloudauth」即可一键安装,无需额外配置。

Alicloud Security Id Verification Cloudauth 是免费的吗?

是的,Alicloud Security Id Verification Cloudauth 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Alicloud Security Id Verification Cloudauth 支持哪些平台?

Alicloud Security Id Verification Cloudauth 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Alicloud Security Id Verification Cloudauth?

由 cinience(@cinience)开发并维护,当前版本 v1.0.4。

💬 留言讨论