The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local scripts (scripts/search.mjs and scripts/readpage.mjs) using the node runtime to interact with Alibaba Cloud APIs. This is the intended primary purpose of the skill and uses local paths.
[EXTERNAL_DOWNLOADS]: The scripts communicate with official Alibaba Cloud API endpoints (cloud-iqs.aliyuncs.com) to fetch search results and page content. These are well-known vendor-owned domains.
[CREDENTIALS_UNSAFE]: The skill implements standard credential management by looking for an API key in the ALIYUN_IQS_API_KEY environment variable or a local configuration file located at ~/.alibabacloud/iqs/env. It correctly advises users to manage secrets via environment variables rather than hardcoding them.
[DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration. Network requests are strictly limited to the official vendor API endpoint and are used to send the user's search query or the target URL for page reading.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data (search snippets and web page content). While this is an inherent risk of search skills, the implementation uses structured JSON for processing and the instructions include verification steps, which helps mitigate accidental instruction following from retrieved content.

alibabacloud-iqs-search