The Agent Skills Directory

[COMMAND_EXECUTION]: The skill employs the aliyun CLI to interact with Alibaba Cloud MSE and ARMS services for resource discovery and configuration retrieval. It also uses curl to perform range queries against Prometheus endpoints to fetch monitoring metrics. These operations are consistent with the skill's stated purpose of health and capacity inspection.
[EXTERNAL_DOWNLOADS]: The references/cli-installation-guide.md file contains links to download the aliyun-cli binary from aliyuncli.alicdn.com. As this is the vendor's official distribution domain (Alibaba Cloud), it is a trusted source and necessary for the skill to function.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data including MSE instance names, IDs, and Prometheus metric results. This ingestion of untrusted data represents an indirect injection surface, though mitigated by the use of static PromQL templates.
Ingestion points: Instance metadata from list-clusters and time-series data from Prometheus API responses.
Boundary markers: No specific boundary markers or "ignore" instructions are used for the interpolated data.
Capability inventory: Execution of cloud API calls via the aliyun CLI, network access via curl, and local file writing for inspection reports.
Sanitization: The skill correctly uses urllib.parse.quote via a Python helper to URL-encode PromQL queries, providing protection against basic injection attempts in the query parameters.

alibabacloud-mse-nacos-inspection