The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes several helper scripts (scripts/iacservice.py, scripts/static_checks.sh) to perform resource lookups and validate generated HCL code. These scripts invoke the official Alibaba Cloud CLI (aliyun) and standard utilities like grep and awk. Analysis of the Python scripts shows they use the list-based subprocess.run method without shell=True, which is a secure practice to prevent shell injection.
[EXTERNAL_DOWNLOADS]: The skill includes maintenance scripts (scripts/build_alicloud_providers.py, scripts/build_deprecated_fields.py) that clone the official Alibaba Cloud Terraform provider repository from https://github.com/aliyun/terraform-provider-alicloud.git. These downloads target the official vendor repository for the purpose of keeping local metadata caches up to date.
[DATA_EXFILTRATION]: Network operations are directed towards official Alibaba Cloud endpoints, specifically iac.cn-zhangjiakou.aliyuncs.com for IaCService metadata and validation. The skill uses a configuration_source header in the generated HCL for attribution/telemetry, which is a common practice for vendor-provided tooling.
[CREDENTIALS_UNSAFE]: The skill contains explicit, 'hard' rules forbidding the agent from reading, writing, or requesting cloud credentials (AK/SK). It provides clear guidance on using current, secure environment variables (ALIBABA_CLOUD_ACCESS_KEY_ID, etc.) and delegating authentication to the provider's native credential chain.

alibabacloud-terraform-code-generation