alibabacloud-cms-manage

SUSPICIOUS: the core `aliyun cms2` management purpose aligns with official Alibaba Cloud tooling, but the skill's footprint expands into broad onboarding and mutation workflows, including external agent installers and script-based setup paths that are not consistently provenance-verified. Data flows mainly target official Alibaba endpoints, so this is not confirmed malware, but the supply-chain and scope complexity make it higher-risk than a narrowly scoped CMS management skill.