← 返回 Skills 市场

Aliyun Fc Agentrun

Name: Aliyun Fc Agentrun
Author: cinience

作者 cinience · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install aliyun-fc-agentrun

功能描述

Use when managing Function Compute AgentRun resources via OpenAPI (runtime, sandbox, model, memory, credentials), including creating runtimes/endpoints, quer...

使用说明 (SKILL.md)

Category: service

Function Compute AgentRun (OpenAPI)

Use AgentRun OpenAPI (ROA) to manage runtimes, sandboxes, model services, memory, and credentials.

Prerequisites

AccessKey via RAM user (least privilege).
Select the correct regional endpoint (see references/endpoints.md). If unsure, choose the most reasonable region for the task or ask the user.
Use OpenAPI Explorer or official SDK to avoid manual signing (ROA requires SignatureV1).

Workflow

Choose region endpoint (agentrun.cn-\x3Cregion>.aliyuncs.com).
Create runtime → publish version → create runtime endpoint.
Create sandbox/template if needed.
Configure credentials and model services as required.
Query resources for troubleshooting.

API Groups

See references/api_overview.md for the full API list and grouping.

Script quickstart

python skills/compute/fc/aliyun-fc-agentrun/scripts/quickstart.py

Environment variables:

AGENTRUN_ENDPOINT
ALICLOUD_ACCESS_KEY_ID
ALICLOUD_ACCESS_KEY_SECRET
OUTPUT_DIR (optional)

Runtime flow script

AGENTRUN_RUNTIME_NAME="my-runtime" \\
AGENTRUN_RUNTIME_ENDPOINT_NAME="my-runtime-endpoint" \\
python skills/compute/fc/aliyun-fc-agentrun/scripts/runtime_flow.py

Environment variables:

AGENTRUN_ENDPOINT
ALICLOUD_ACCESS_KEY_ID
ALICLOUD_ACCESS_KEY_SECRET
AGENTRUN_RUNTIME_NAME
AGENTRUN_RUNTIME_ENDPOINT_NAME
AGENTRUN_RUNTIME_DESC (optional)
OUTPUT_DIR (optional)

Cleanup script

AGENTRUN_RUNTIME_ID="runtime-id" \\
AGENTRUN_RUNTIME_ENDPOINT_ID="endpoint-id" \\
python skills/compute/fc/aliyun-fc-agentrun/scripts/cleanup_runtime.py

Environment variables:

AGENTRUN_ENDPOINT
ALICLOUD_ACCESS_KEY_ID
ALICLOUD_ACCESS_KEY_SECRET
AGENTRUN_RUNTIME_ID
AGENTRUN_RUNTIME_ENDPOINT_ID
OUTPUT_DIR (optional)

SDK Notes

See references/sdk.md for SDK acquisition guidance.

Output Policy

If you store any generated files or responses, write them under: output/compute-fc-agentrun/.

Validation

mkdir -p output/aliyun-fc-agentrun
for f in skills/compute/fc/aliyun-fc-agentrun/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-fc-agentrun/validate.txt

Pass criteria: command exits 0 and output/aliyun-fc-agentrun/validate.txt is generated.

Output And Evidence

Save artifacts, command outputs, and API response summaries under output/aliyun-fc-agentrun/.
Include key parameters (region/resource id/time range) in evidence files for reproducibility.

References

API overview and operation list: references/api_overview.md
Regional endpoints: references/endpoints.md
SDK guidance: references/sdk.md
Source list: references/sources.md

安全使用建议

This skill appears to do what it says (manage Alibaba Cloud AgentRun runtimes/endpoints) and the included Python scripts are straightforward. Before installing or running it, do the following: 1) Do not provide long-lived full-admin credentials — create a RAM user with least privilege (only the AgentRun APIs needed: create/update/delete/list runtimes/endpoints, credential operations, etc.), or prefer temporary STS tokens. 2) Verify and install the AgentRun SDK from official Alibaba Cloud sources (OpenAPI Explorer / official package repository) — do not install untrusted third-party packages. 3) Note the manifest inconsistency: the registry does not declare the required env vars; treat this as a red flag and require the publisher to update the manifest to list ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET (and optional security token) as required. 4) Run initial tests in an isolated or test account (or with tightly scoped credentials) and review the output files under output/compute-fc-agentrun/. 5) If you need higher assurance, request source provenance (where the SDK should be obtained) or a corrected manifest from the publisher; otherwise consider the skill suspicious and limit any credentials used to a throwaway/test account.

功能分析

Type: OpenClaw Skill Name: aliyun-fc-agentrun Version: 1.0.0 The skill bundle provides standard scripts and documentation for managing Alibaba Cloud Function Compute AgentRun resources. The Python scripts (quickstart.py, runtime_flow.py, cleanup_runtime.py) utilize the official Alibaba Cloud SDK to perform legitimate resource management tasks such as listing, creating, and deleting runtimes and endpoints. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code logic is consistent with the stated purpose of the skill.

能力评估

ℹ Purpose & Capability

Name/description align with the included scripts and references: the scripts call the AgentRun OpenAPI to create/list/delete runtimes/endpoints and manage related resources. Requiring Alibaba Cloud access keys and selecting a regional endpoint is expected for this purpose. However, the registry entry declares no required environment variables or primary credential while the SKILL.md and all scripts clearly require ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (and optionally a security token) — this metadata mismatch is inconsistent.

✓ Instruction Scope

SKILL.md restricts actions to AgentRun operations (create/publish endpoint/list/delete) and the three Python scripts only interact with the AgentRun SDK and write responses into an output/compute-fc-agentrun/ directory. There are no instructions to read arbitrary unrelated files, contact unexpected endpoints, or exfiltrate data beyond the AgentRun service. The scripts do exit if the SDK is missing, and they store API responses locally.

ℹ Install Mechanism

This is instruction-only (no install spec). The scripts import alibabacloud_agentrun20250910 and alibabacloud_tea_openapi SDK packages; SKILL.md points users to use the OpenAPI Explorer or SDK but does not provide automated install steps. That is not inherently malicious but raises usability/risk concerns: users must fetch/install the SDK from official sources (or generate it) before running the scripts. Lack of an explicit, verifiable SDK source means a user could accidentally install a malicious package if they follow ambiguous instructions.

⚠ Credentials

The scripts require cloud credentials (ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET) and optionally a security token; those are necessary for AgentRun operations and are proportionate to the stated functionality. However, the registry metadata does not declare these required environment variables or a primary credential. That discrepancy is a material concern: the skill will ask for sensitive credentials at runtime but does not advertise that requirement in its manifest, making it easier to overlook when granting keys. Recommend the skill manifest be updated to declare required env vars and the primary credential.

✓ Persistence & Privilege

The skill does not request always:true, does not claim to run installs or modify other skills, and only writes outputs under its own output/compute-fc-agentrun/ folder. It does not request persistent system-wide privileges in the manifest. Autonomous invocation is allowed (platform default) but is not combined with other high-risk flags here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install aliyun-fc-agentrun
安装完成后，直接呼叫该 Skill 的名称或使用 /aliyun-fc-agentrun 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of aliyun-fc-agentrun skill: - Provides management for Alibaba Cloud Function Compute AgentRun resources using OpenAPI (ROA). - Supports workflows to create and manage runtimes, endpoints, sandboxes, model services, and credentials. - Includes quickstart, runtime flow, and cleanup scripts with environment variable configuration. - Guides users on region and endpoint selection, OpenAPI/SDK usage, and output directory structure. - Adds validation and reproducibility guidelines for evidence and artifact storage.

元数据

Slug aliyun-fc-agentrun

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题