← 返回 Skills 市场

Aliyun Airec Manage

Name: Aliyun Airec Manage
Author: cinience

作者 cinience · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install aliyun-airec-manage

功能描述

Use when managing Alibaba Cloud AIRec (Airec) via OpenAPI/SDK, including the user needs recommendation-engine resource operations in Alibaba Cloud, including...

使用说明 (SKILL.md)

Category: service

AIRec

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for AIRec.

Workflow

Confirm region, resource identifiers, and desired action.
Discover API list and required parameters (see references).
Call API with SDK or OpenAPI Explorer.
Verify results with describe/list APIs.

AccessKey priority (must follow)

Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
Shared config file: ~/.alibabacloud/credentials

API discovery

Product code: Airec
Default API version: 2020-11-26
Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

Inventory/list: prefer List* / Describe* APIs to get current resources.
Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code \x3CProductCode> --version \x3CVersion>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-airec-manage/

Validation

mkdir -p output/aliyun-airec-manage
for f in skills/ai/recommendation/aliyun-airec-manage/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-airec-manage/validate.txt

Pass criteria: command exits 0 and output/aliyun-airec-manage/validate.txt is generated.

Output And Evidence

Save artifacts, command outputs, and API response summaries under output/aliyun-airec-manage/.
Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

Configure least-privilege Alibaba Cloud credentials before execution.
Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
If region is unclear, ask the user before running mutating operations.

References

Sources: references/sources.md

安全使用建议

This skill appears to be what it says (an Alibaba AIRec management helper) but the published metadata fails to declare the credentials the instructions expect. Before installing or running it: - Don't paste or upload long-lived Alibaba Cloud access keys until you verify the author and intent. Prefer using a short-lived, least-privilege IAM role scoped to only the Airec actions needed. - Inspect the SKILL.md and the included script locally (you already have the files). The script fetches public API metadata from api.aliyun.com and writes to output/aliyun-airec-manage/ — that is normal. But authenticated SDK calls (create/update) would require credentials and could modify your cloud resources. - Ask the publisher to update the registry metadata to declare required env vars (ALICLOUD_ACCESS_KEY_ID/SECRET/REGION) and to justify any mutating operations; request a detailed list of APIs the skill will call for mutating actions. - If you must test: run the discovery script in an isolated environment (no real credentials) to confirm behavior, and only provide credentials with least privilege and limited lifetime when you trust the skill. If the author cannot explain the metadata/credential mismatch, treat the skill with extra caution (do not supply admin or broad-scope keys).

功能分析

Type: OpenClaw Skill Name: aliyun-airec-manage Version: 1.0.0 The skill bundle provides standard functionality for managing Alibaba Cloud AIRec resources via OpenAPI. The included script (scripts/list_openapi_meta_apis.py) fetches API metadata from legitimate Alibaba Cloud endpoints (api.aliyun.com) using the Python standard library, and the instructions in SKILL.md align with typical cloud management workflows without any evidence of malicious intent, data exfiltration, or harmful prompt injection.

能力评估

⚠ Purpose & Capability

The skill is described as an AIRec manager (cloud resource operations), which legitimately may need Alibaba Cloud credentials. However, the published metadata lists no required environment variables or primary credential while SKILL.md explicitly prioritizes ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET and a shared config file (~/.alibabacloud/credentials). The omission in the metadata is an incoherence: either the skill should declare the credentials it needs, or it should not prompt for them.

ℹ Instruction Scope

SKILL.md instructs the agent to discover APIs, call SDK/OpenAPI, and verify results. It explicitly prioritizes env vars and mentions the shared credentials file path. The included Python script only fetches public OpenAPI metadata from api.aliyun.com and writes files under output/aliyun-airec-manage/, which is consistent with discovery. Still, the instructions could lead the agent to perform authenticated mutating operations (create/update) that would require credentials and access to the user's account; those actions are not gated by declared requirements.

✓ Install Mechanism

No install spec is present; this is an instruction-only skill plus a small script. The script uses standard Python libraries and fetches metadata over HTTPS from a documented Alibaba endpoint. No downloads or archive extraction are used.

⚠ Credentials

SKILL.md asks for environment variables (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID) and references ~/.alibabacloud/credentials, but the skill metadata lists no required env vars or primary credential. That discrepancy is risky because the agent or user could be prompted to supply sensitive access keys that were not declared at install time. The script itself does not use these env vars, but the runtime instructions expect them for authenticated operations.

✓ Persistence & Privilege

The skill is not marked always:true and does not request persistent system-wide changes. It writes outputs under a skill-specific output directory. Autonomous invocation is allowed (platform default), which increases risk if credentials are provided, but this by itself is expected for skills.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install aliyun-airec-manage
安装完成后，直接呼叫该 Skill 的名称或使用 /aliyun-airec-manage 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of aliyun-airec-manage. - Provides management capabilities for Alibaba Cloud AIRec resources via OpenAPI/SDK. - Supports listing, creating, updating, and troubleshooting AIRec resources. - Implements an access key priority system (environment variables, then shared config file). - Encourages metadata-driven API discovery before business operations. - Outputs artifacts and validation results under `output/aliyun-airec-manage/`.

元数据

Slug aliyun-airec-manage

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题