The Agent Skills Directory

[COMMAND_EXECUTION]: The skill interacts with Alibaba Cloud services by executing the aliyun CLI as a subprocess.
Evidence: In scripts/_cli.py, the _call_cli function uses subprocess.run() with the argument list form to execute commands. All inputs such as billing cycles (--billing-cycle) and instance IDs (--instance-id) are validated using regular expressions or date-parsing logic before being passed to the CLI, effectively preventing shell injection.
[DATA_EXPOSURE]: The skill retrieves account identity and billing details to perform its core function.
Evidence: scripts/sts_token.py executes sts get-caller-identity to retrieve the Account ID (UID), and other scripts query bssopenapi for cost breakdowns.
Context: The skill is authored by the vendor (aliyun) and targets official vendor endpoints (business.aliyuncs.com, sts.aliyuncs.com). It strictly forbids the manual entry or storage of credentials, relying on the environment's existing CLI configuration, which is a secure practice for this type of integration.

alibabacloud-db-cost-diagnosis