← 返回 Skills 市场
cinience

Aliyun Hbr Backup

作者 cinience · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
85
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install aliyun-hbr-backup
功能描述
Use when managing Alibaba Cloud Cloud Backup (HBR) via OpenAPI/SDK, including the user asks for backup lifecycle operations such as resource listing, policy/...
使用说明 (SKILL.md)

Category: service

Cloud Backup

Use Alibaba Cloud OpenAPI (RPC) with official SDKs or OpenAPI Explorer to manage resources for Cloud Backup.

Workflow

  1. Confirm region, resource identifiers, and desired action.
  2. Discover API list and required parameters (see references).
  3. Call API with SDK or OpenAPI Explorer.
  4. Verify results with describe/list APIs.

AccessKey priority (must follow)

  1. Environment variables: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID Region policy: ALICLOUD_REGION_ID is an optional default. If unset, decide the most reasonable region for the task; if unclear, ask the user.
  2. Shared config file: ~/.alibabacloud/credentials

API discovery

  • Product code: hbr
  • Default API version: 2017-09-08
  • Use OpenAPI metadata endpoints to list APIs and get schemas (see references).

High-frequency operation patterns

  1. Inventory/list: prefer List* / Describe* APIs to get current resources.
  2. Change/configure: prefer Create* / Update* / Modify* / Set* APIs for mutations.
  3. Status/troubleshoot: prefer Get* / Query* / Describe*Status APIs for diagnosis.

Minimal executable quickstart

Use metadata-first discovery before calling business APIs:

python scripts/list_openapi_meta_apis.py

Optional overrides:

python scripts/list_openapi_meta_apis.py --product-code \x3CProductCode> --version \x3CVersion>

The script writes API inventory artifacts under the skill output directory.

Output policy

If you need to save responses or generated artifacts, write them under: output/aliyun-hbr-backup/

Validation

mkdir -p output/aliyun-hbr-backup
for f in skills/backup/aliyun-hbr-backup/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/aliyun-hbr-backup/validate.txt

Pass criteria: command exits 0 and output/aliyun-hbr-backup/validate.txt is generated.

Output And Evidence

  • Save artifacts, command outputs, and API response summaries under output/aliyun-hbr-backup/.
  • Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Prerequisites

  • Configure least-privilege Alibaba Cloud credentials before execution.
  • Prefer environment variables: ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID.
  • If region is unclear, ask the user before running mutating operations.

References

  • Sources: references/sources.md
安全使用建议
This skill appears to implement what it claims (HBR/OpenAPI helper) but the manifest fails to declare the Alibaba Cloud credentials the instructions require. Before installing or running it: - Treat it as needing Alibaba Cloud credentials. Only provide least-privilege credentials (temporary/limited IAM keys) scoped to HBR operations. - Confirm how your agent runtime will supply credentials (env vars, shared config) because the package metadata does not declare them — that affects prompts and automation behavior. - Inspect any agent prompts or logs that might write sensitive identifiers or credentials to output/aliyun-hbr-backup/ and ensure that directory is secure or isolated. - If you plan to allow automatic (agent-invoked) mutating operations, require an explicit user confirmation step for any Create/Update/Delete actions. - If you need stronger assurance, run the included script in a sandbox first (it only fetches public API metadata) and review any additional code the agent would run to perform SDK/API calls. I have medium confidence in this assessment because the package is small and readable, but the metadata/instructions mismatch leaves ambiguity about how credentials will be handled at runtime; clarifying that would raise confidence to high.
功能分析
Type: OpenClaw Skill Name: aliyun-hbr-backup Version: 1.0.0 The skill bundle is a legitimate tool for managing Alibaba Cloud Backup (HBR) resources. The provided script (scripts/list_openapi_meta_apis.py) fetches API metadata from official Alibaba Cloud endpoints (api.aliyun.com) and saves it locally for the agent's use, with no evidence of data exfiltration, malicious execution, or prompt injection.
能力评估
Purpose & Capability
The name and description match the included instructions and script: this is an Alibaba Cloud HBR/OpenAPI helper. Requesting Alibaba Cloud credentials is reasonable for this purpose. However, the published metadata lists no required env vars or primary credential even though the SKILL.md explicitly instructs using ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET and a shared credentials file; that mismatch is an inconsistency.
Instruction Scope
SKILL.md instructs the agent to discover APIs, call SDK/OpenAPI Explorer, and save artifacts (including key parameters like region/resource id/time range) under output/aliyun-hbr-backup/. It also sets an access-key priority (env vars and ~/.alibabacloud/credentials). The included script only fetches public OpenAPI metadata (no credential use), but the prose grants the agent broad discretion to call SDKs and perform mutating operations — and to write potentially sensitive evidence to disk. The instructions do not limit which APIs may be called or require explicit user confirmation before mutations, except a generic 'ask the user' for unclear regions.
Install Mechanism
This is instruction-only with a small included Python script. There is no installer that downloads or executes remote archives and no extra dependencies declared. Low install risk.
Credentials
The SKILL.md explicitly expects Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, optional ALICLOUD_REGION_ID) and references ~/.alibabacloud/credentials, which are proportional to the stated purpose. But the skill metadata lists no required env vars or primary credential — an omission that makes it unclear how the skill will request or handle credentials at install/runtime. The instruction to include key parameters in output files could expose identifiers alongside API responses; users should ensure least-privilege and consider use of temporary, scoped credentials.
Persistence & Privilege
The skill is not force-included (always:false) and does not request elevated platform-wide privileges. It writes artifacts to an output directory under the skill workspace (normal). It does not modify other skills or global agent configuration.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install aliyun-hbr-backup
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /aliyun-hbr-backup 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of aliyun-hbr-backup skill. - Enables management of Alibaba Cloud Cloud Backup (HBR) resources using OpenAPI/SDK. - Supports backup lifecycle operations: resource listing, policy/config updates, job status queries, and troubleshooting workflows. - Prioritizes credential acquisition via environment variables, with fallback to shared config file. - Provides workflow guidance, including API discovery and artifact output policies. - Includes validation and reproducibility requirements for command outputs and evidence. - References available API and quickstart scripting included.
元数据
Slug aliyun-hbr-backup
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Aliyun Hbr Backup 是什么?

Use when managing Alibaba Cloud Cloud Backup (HBR) via OpenAPI/SDK, including the user asks for backup lifecycle operations such as resource listing, policy/... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 85 次。

如何安装 Aliyun Hbr Backup?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install aliyun-hbr-backup」即可一键安装,无需额外配置。

Aliyun Hbr Backup 是免费的吗?

是的,Aliyun Hbr Backup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Aliyun Hbr Backup 支持哪些平台?

Aliyun Hbr Backup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Aliyun Hbr Backup?

由 cinience(@cinience)开发并维护,当前版本 v1.0.0。

💬 留言讨论