The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes a wide range of aliyun CLI commands to interact with Alibaba Cloud services, including ECS (Elastic Compute Service) and OOS (Operation Orchestration Service). These operations are the primary function of the skill and follow the vendor's standard CLI practices.
[EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the official Aliyun CLI and OOS plugins from the vendor's verified infrastructure at aliyuncli.alicdn.com and the official GitHub releases page (github.com/aliyun/alibaba-cloud-cli). These are trusted sources for the intended cloud operations workflow.
[INDIRECT_PROMPT_INJECTION]: The skill ingests extension descriptions and template metadata from the cloud provider's public repository. This creates a surface for indirect prompt injection if template content were malicious. However, the risk is mitigated by the skill's reliance on official Alibaba Cloud public templates and the inclusion of explicit input validation rules (regex and JSON escaping) for all parameters before they are passed to the CLI.
[PRIVILEGE_ESCALATION]: Documentation includes instructions for installing the CLI binary using sudo and configuring RAM (Resource Access Management) policies. While these involve elevated privileges, they are standard administrative requirements for managing cloud infrastructure and are presented as troubleshooting steps for standard permission errors.
[CREDENTIALS_UNSAFE]: The skill explicitly enforces security rules that forbid printing, reading, or prompting for Access Keys (AK/SK) within the session. It correctly directs users to configure credentials outside the agent environment using the aliyun configure tool, following industry best practices for secret management.

alibabacloud-ecs-install-extension